Last update:
Remove user from a group
Aug 21, 2026
Scenario
An administrator needs to remove a registered user from an application group in AIC to revoke group-scoped access or correct an incorrect membership. This is commonly required during role/team changes, offboarding, or remediation after an access review. For Policy-on applications, removing the user from the group is the required way to revoke inherited roles that cannot be revoked individually.Prerequisites
- Administrator has access to Users to locate the user and review current group memberships.
- Administrator has access to Applications → Access tile to manage group membership (remove users).
- The user is registered and searchable in AIC, and the target Group name and Application ID are identified.
- The user’s UUID is available (used to locate the user inside the group’s Users list in the application context).
- Administrator has confirmed there is an approved request / justification for access removal (if required by policy).
Roles authorized
Steps
- Identify the correct group and application (Users view - user-centric)
- Sign in to Aikyam Identity Console.
- Navigate to Users from the left navigation pane.
- Search for the user and open the user profile.
- Open the Groups tab and locate the group you need to remove.
- Note the Group name and the associated Application ID (you will use these in the Applications view).
- Copy/confirm the user’s UUID from the user profile (needed to find the user in the group Users list).
- Remove the user from the group (Applications view - application-centric)
- Navigate to Applications from the left navigation pane and select the relevant application (using the noted Application ID).
- Open the Access tile.
- Click View & Update.
- Go to Groups, select the target group name, then open the Users section.
- Search for the user using the UUID and locate the correct record in the Users list.
- In the Action column, click Remove for the user, then confirm the removal if prompted.
- Verify the user no longer appears in the group Users list.
- Validate effective access after removal (Validation- users view)
- Return to the user profile in Users and open the Roles tab.
- Select the relevant application from the Application dropdown.
- Confirm roles previously inherited via that group are no longer effective.
- (Optional) Open the Groups tab and confirm the removed group no longer appears for the user.
Note:
- For Policy-on applications, users inherit roles through group membership; removing the user from the group revokes inherited access automatically.
- For legacy / Policy-off applications, group membership may not grant/revoke roles automatically; revoke roles separately if required.
- Use Activities tab to trace access changes for compliance, audits, and investigations.
Previous:
Add user to a group
Share additional feedback to help us improve.
0/255
|
Powered by Aikyam @2025 All rights reserved
+1 866 451 2735
+1 866 451 2735
+1 855 819 5909