Unable to remove roles from Users who have inherited them.

tom_hs2 · ‎01-23-2018

Hi All,

I am System admin using Istanbul SN. I have some users who have left the business and they consumed fulfiller roles. They were assigned them through association with the group they were placed in. Upon taking them out of that group, it hasn't removed their roles. I then try and remove them manually, but it will not let me. This only seems to happen when the roles are showing as Inherited = true.

I go into the edit section on roles (one user has 22 roles) and absolutely no roles appear to transfer from selected back to available.

some of the users have no real dependencies, so removing the roles from them would not cause any issues. I do not want to log a customer support call every time i want to do some housekeeping with users who have left the company.

thanks in advance for you help.

Tom

aldred · ‎04-26-2018

I was suffering from the same issue as yourself, a user that despite not being in any groups was still inheriting roles (30 in my case) and was unable to remove them.

I was able to work around this as follows:

1. Navigate to the "sys_user_has_role" table as already mentioned in this thread.

2. Filter the results down to the username affected.

3. Export the list as an XML file.

4. Using your XML editor of choice, locate the "<inherited>true</inherited>" entry and replace it with "<inherited>false</inherited>".

5. Save the changes and import the XML file back into the sys_user_has_role table.

6. You should now be able to freely delete the roles from the user.

I double-checked to ensure that this caused no obvious errors and confirmed that the user was no longer able to access the applications associated with the removed roles.

Hope this helps.

View solution in original post

Slawek_Radziewi · ‎04-13-2018

I cannot. Delete button is inactive although I have admin and security_admin roles.

Dubz · ‎04-13-2018

OK, maybe raise a case with HI support and see what they make of it.

apoorva_tewari · ‎04-13-2018

To fix this I went to sys_user_has_role table and set state as pending approval .

Once state is pending approval went directly to user record selected that record and delete.

Slawek_Radziewi · ‎04-13-2018

I have no rights to change state even with admin role.

apoorva_tewari · ‎04-13-2018

Go to sys_user_has_role table and there you can modify state (search with that user name)