Unable to remove roles from Users who have inherited them.

tom_hs2 · ‎01-23-2018

Hi All,

I am System admin using Istanbul SN. I have some users who have left the business and they consumed fulfiller roles. They were assigned them through association with the group they were placed in. Upon taking them out of that group, it hasn't removed their roles. I then try and remove them manually, but it will not let me. This only seems to happen when the roles are showing as Inherited = true.

I go into the edit section on roles (one user has 22 roles) and absolutely no roles appear to transfer from selected back to available.

some of the users have no real dependencies, so removing the roles from them would not cause any issues. I do not want to log a customer support call every time i want to do some housekeeping with users who have left the company.

thanks in advance for you help.

Tom

aldred · ‎04-26-2018

I was suffering from the same issue as yourself, a user that despite not being in any groups was still inheriting roles (30 in my case) and was unable to remove them.

I was able to work around this as follows:

1. Navigate to the "sys_user_has_role" table as already mentioned in this thread.

2. Filter the results down to the username affected.

3. Export the list as an XML file.

4. Using your XML editor of choice, locate the "<inherited>true</inherited>" entry and replace it with "<inherited>false</inherited>".

5. Save the changes and import the XML file back into the sys_user_has_role table.

6. You should now be able to freely delete the roles from the user.

I double-checked to ensure that this caused no obvious errors and confirmed that the user was no longer able to access the applications associated with the removed roles.

Hope this helps.

View solution in original post

Randall King · ‎06-17-2020

The XML export/import didn't work for me in New York. I get the following:

Skipping record for table sys_user_has_role and id 36377423db220c102596d2e3ca9619d8 - permission denied

Justin Lucas · ‎10-27-2022

This is the only thing that worked for me and I tried everything else. Thanks for sharing, Jordan!

Cindy26 · ‎12-02-2022

this says successful, but the record is not updated/deleted.

Laura26 · ‎09-27-2024

Thank you!!! This worked for me!

Bo Beeman2 · ‎06-30-2022

I used this method but exported the user role list creating a template from the import method after trying the XML method and it was security constrained.

In addition you will need to set read only to false for the inherited field on the user role table.