How to remove inactive users from groups and revoke the access associated with that group?

[Nivetha K1]

Hi All,

We've a requirement in our custom application "EDM" to revoke inactive user license based on groups. Please find the process of provisioning roles to users below and suggest some solution to invoke the access once that particular user profile is set to inactive.

We're working on a record producer where we have two important fields "Business owner" and "Technical owner". Once we fill these two fields and submit the request, users whom we've given as business owner and technical owner will be provisioned with below roles:

x_ecsr_edm.business_owner

x_ecsr_edm.texhnical_owner

But, current requirement is to revoke these roles as well as deleting the users from the edm groups once the user profile is set to active false and locked out.

I tried various scripts but none is working as expected using single script.

Can anyone help me with the best solution and process on how to achieve this?

Any feedback/suggestion would be highly helpful as our go live is nearing.

Thanks,

Nivetha K.

[Nivetha K1]

Hi Ankur,

I tried to delete the users first from sys_user_has_role table using the attached script but it is not working. 

Can you please let me know what is the issue with the script?

Thanks,

Nivetha K.

[Ankur Bawiskar]

Hi,

this is the issue

line number 4

update as below

userRole.addQuery('user', current.sys_id);

Regards
Ankur

[Nivetha K1]

Thanks for your inputs, Ankur.

This script is working fine now and roles are getting deleted in personal instance.

But, when I try the same in my application, am getting cross scope error. (screenshot attached).

I cross checked the roles table and application access with my personal instance but everything is same. Still, am getting the attached error.

Thanks,

Nivetha K.

[Ankur Bawiskar]

Hi Nivetha,

it is not allowing to delete record from sys_user_has_role

Open that table

Set Can Delete Checkbox

Regards
Ankur

[Ankur Bawiskar]

@Nivetha K 

Did you mistakenly mark other response as correct.

As per your comments my reply helped you making the script work fine.

Would you mind marking my response as correct if I was able to help/guide you

Regards
Ankur