Home / Identity Administration / User Accounts and Groups / Current: Removing Groups from Groups
If you have groups that are members of other groups, and the criteria for their membership changes, you can easily remove them. When you do so, any entitlements and delegations they received from the group via a policy will be handled in accordance with that policy. For example, if you have a group with an Exchange mailbox RET policy that specifies a user's mailbox be deprovisioned when that user is no longer a member of the group, the users in the removed group will lose their mailboxes.
This topic demonstrates how to remove groups from groups in EmpowerID.
Search for the group from which you want to remove a group and then click the record for that group. You should see a list of contextual actions appear that can be executed against that group appear in the Actions pane.
In the following image, the Locations pane has been collapsed to conserve screen real estate. |
From the View One page, expand the Nested Group Members accordion to verify that there are no records for the groups you removed.
If you have an email address that is registered in EmpowerID, you can have EmpowerID email you the group membership by clicking the email icon. |
On a server with the Active Directory PowerShell module, run the following PowerShell cmdlet (substituting the group in the cmdlet with the appropriate group from your environment):
Get-ADPrincipalGroupMembership "London Contractors GVR1" |
|