User still has role after being removed from group

[rudy6]

I noticed a few times that a user still has the itil role and other roles after being removed from the group that provided the roles.

Our instance is syncing users and select groups from our AD / Azure environment.
A month ago a user was added to the IT dept. group, which has the itil role. Last week the user was removed from IT dept. group. This week I reviewed the user record and confirmed removal from the IT dept. group, but the itil role still shows at the bottom of the User page and the user still has itil access and the role still shows 'inherited' is true.
The user is active, has two group memberships, neither of the groups have any roles assigned.

A. How do I remove the roles from this user?

B. How do I prevent it from happening to other users when they are removed from groups that provide roles?

Thank you in advance for any suggestions to track down this issue.

Rudy Arlt

[Willem]

Can you check if this is happening for other users as well? Is this happening recently?

Check your synchronization if the integration has sufficient rights in the system.

Can you check the logs for any errors or warning around the time the user is removed from the group?

[asifnoor]

Hi,

Check if the role is inherited form any other group to which he is still a member of. 

Secondly check if the user is assigned that role explicitly.

Mark the comment as a correct answer if this answers your question.

[rudy6]

Both groups show no roles.

[asifnoor]

Looks like that the role is added explicitly. So removing the group does not remove the role.