EmpowerID offers a cart-based process for managing group memberships, including removing users. This action creates a business request that undergoes the approval process defined by an organization. If approved, the selected members are removed from the group. If not approved, no changes are made to the group. This approach ensures that changes follow the defined approval process while maintaining security and auditability in group management.
Procedure
Step 1: Create a Remove Member Business Request
Navigate to your organization's Resource Admin portal and log in as a group owner or administrative user.
Select Group from the Resource dropdown menu.
Locate the desired group and click the Details button.
This directs you to the Overview page for the group.
Go to the Acccount as Members tab to view all current members.
Select the members you want to remove by checking the boxes next to their names. For bulk removal, select multiple members.
Click the Remove [x] selected members button. The value of [x] is set by the number of members selected, which in this case is 1.
Click Delete to confirm your decision; otherwise, click Cancel.
This adds the requested removal action to the cart.
Open the cart interface to review the selected member(s) marked for removal.
Enter a comment below the Justification dropdown if choosing Other Justification, or select one of the predefined justification answers to skip adding a comment.
Enter a Business Request Name for the removal request and click Submit. Optionally, you can add a comment if desired.
This creates a business request for removing the member(s). Approvers will review and either approve or reject the request. If approved, the selected member(s) will be removed from the group.
Step 2: Track request status
Click the status link displayed in the Your Cart Submission Status modal.
This directs you to My Tasks with the business request opened to the Overview tab. From here you can view general information about the request, including the percentage completed, who made the request, when the request was created, and more.
Navigate to the Process Steps tab to view the process status.
In the below example, fulfillment is waiting on Owner Approval, which is specified by the Owner Approval policy. This policy specifies that Access Managers (RBAC Owners) and responsible parties for the group can approve or reject the request.
Click Show Approvers to view the default approvers for the Owner Approval policy.
Step 3: Approve the Request
A designated approver must approve the request before the system fulfills the request to remove members from the group. If you are testing the removal process and are an administrator but not an approver, you can delegate the task to yourself and approve the request by doing the following:
Click Delegate Business Request from any tab of the opened business request.
In the Add Additional Approvers modal, search for and select yourself from the Select a Person field and then click Add Additional Approvers.
You should see you now have the ability to make a decision as indicated by the Decision buttons.
Click the Decision button and select Approve.
Select a justification.
Click Submit.
You should see the request has been approved.
Result
After completing these steps:
The selected users will be removed from the group if the business request is approved.
You can verify the removal by checking the "Accounts as Member" tab.