---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Remove users from groups

# Remove users from groups {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the Simulate Remove from Group for simulating the user's access changes for a resource (table).

## Before you begin

Role required: access_analyzer_admin

Take actions must be enabled. For more information, see [Configure the Access Simulator (Take actions)](https://www.servicenow.com/docs/paHLe80ms9E8svegMKeXSA "Configure the Take actions options to complete the role and group assignments that you need to add after the simulation.").

## Procedure

1. Navigate to AllAccess AnalyzerAccess Simulator.
2. Select Simulate from the Remove the user from a Group section.
3. In the Simulation criteria view, configure the following fields:  
   {#remove-user-from-group__table_ygk_zkh_gbc__entry__2}

   | Field | Description |
   |-|-|
   | Select user | Name of the user to select from the list. In this example, ITIL User. |
   | Select group | Name of the group to select from the list. In this example, Incident Management. |
   | Rule type | Rule type is auto-populated and can't be changed. |
   | Select table | Name of the table to select from the list. In this example, Incident. |
   | Select record | Name of the record to select from the list. |
   | Select field | Name of the field to select from the list. This field can be used to analyze permissions at the field level. For example, Active, Created By, and so on. |
   [Table 1. Remove the user from a group]

   {#remove-user-from-group__table_ygk_zkh_gbc}
4. Select Next.
5. Preview the changes.  
   Use the Preview changes view to see a simulation of your configured choices. Validate the group that has been removed from the user before moving to the next step.
6. Select Next.
7. In the Simulated results view, check the Present status and Simulated status to validate that access is Passed or Blocked to the simulated user as intended.  
   Note:  
   * To learn more about an ACL (operation) in the Simulated results view, select its operation link.
   * To start the simulation again for a different role, select Start over.
   * To exit the simulation, select Exit.
   {#remove-user-from-group__ul_kgt_c4h_gbc}
8. Select Next.
9. To apply the simulated changes, on the Take action view, select Remove and complete.  
   Note:  
   * If Access Simulator isn't enabled, you can't complete the simulation. To enable it, select Enable actions and accept the legal information.
   * To hide the simulation, select Hide actions. To unhide and enable actions, go to Settings. For more information, see [Configure the Access Simulator (Take actions)](https://www.servicenow.com/docs/paHLe80ms9E8svegMKeXSA "Configure the Take actions options to complete the role and group assignments that you need to add after the simulation.").
   * To exit the simulation without applying the simulated changes, select Skip and Exit.
   {#remove-user-from-group__ul_aky_tmh_gbc}

   If you selected Remove and complete, the simulated group is successfully removed from the user. You can verify the access again by using the Access Analyzer. For more information about how to
   verify access of a user, see [Access Analyzer](https://www.servicenow.com/docs/3zAedffdAq6hGfy~1YbUdw "ServiceNow Access Analyzer is an access diagnostic tool for AI administrators or creators to validate the access controls configured within various resources and agentic assets (agentic workflows and AI agents).").
{#remove-user-from-group__steps_ts3_n4h_gbc}

*[\>]: and then