Should not allow to add ITIL or Admin roles to Contact users

[Sarah Bouil]

If I try to add itil or admin role to Contact users, I want to abort the action. Kindly assist me.

[Sarah Bouil]

1. I tried to add role to a ITIL or Admin role explicitly through a Roles related list- It's restricted and it should be fine

2. There is a Field Service group that contains ITIL, I tried to add a group into a user, the group is added and role ITIL is added also- But I should not allow right- it's failing, kindly assist me how to restrict itil or admin role if its inherit from a group also.

[Krushna R Birla]

No, its working as expected. You have added BR on 'sys_user_has_role' user and role table. Not on group related table so it wont work. 

[Sarah Bouil]

I should also restrict from Group related table. Do I need to write another BR to restrict from Group related list table?

[Krushna R Birla]

I think yes, write it on sys_user_grmember table. Refer below snapshot for your reference, Just click abort checkbox after implementing this in your instance

[Sarah Bouil]

This is not working and not helping me.