Removing Users from Groups

EmpowerID provides a cart-based process for managing group memberships, including removing users. When a removal request is submitted, it generates a business request that follows the organization’s defined approval workflow. If the request is approved, the selected members are removed from the group; if not, no changes are applied. This structured approach ensures all membership modifications comply with security and governance requirements while maintaining full auditability.

Procedure

Step 1: Create a Remove Member Business Request

1. Navigate to your organization's Resource Admin portal and log in as a group owner or administrative user.

2. Select Group from the Resource dropdown menu.
   
   

   Open

   

    

3. Locate the desired group and click the Details button.
   
   

   Open

   

    

   This directs you to the Overview page for the group.
   
   

    

4. Go to the Acccount as Members tab to view all current members.

5. Select the members you want to remove by checking the boxes next to their names. For bulk removal, select multiple members.
   
   

    

6. Click the Remove [x] selected members button. The value of [x] is set by the number of members selected, which in this case is 1.
   
   

    

7. Click Delete to confirm your decision; otherwise, click Cancel.
   
   

   
   This adds the requested removal action to the cart.
   
   

    

8. Open the cart interface to review the selected member(s) marked for removal.
   
   

    

9. Enter a comment below the Justification dropdown if choosing Other Justification, or select one of the predefined justification answers to skip adding a comment.
   
   

    

10. Enter a Business Request Name for the removal request and click Submit. Optionally, you can add a comment if desired.
    
    

     

    This creates a business request for removing the member(s). Approvers will review and either approve or reject the request. If approved, the selected member(s) will be removed from the group.
    
    

     

Step 2: Track request status

1. Click the status link displayed in the Your Cart Submission Status modal.
   
   

    

   This directs you to My Tasks with the business request opened to the Overview tab. From here you can view general information about the request, including the percentage completed, who made the request, when the request was created, and more.
   
   

    

2. Navigate to the Process Steps tab to view the process status.
   In the below example, fulfillment is waiting on Owner Approval, which is specified by the Owner Approval policy. This policy specifies that Access Managers (RBAC Owners) and responsible parties for the group can approve or reject the request.
   
   

    

3. Click Show Approvers to view the default approvers for the Owner Approval policy.
   
   

    

Step 3: Approve the Request

A designated approver must approve the request before the system fulfills the request to remove members from the group. If you are testing the removal process and are an administrator but not an approver, you can delegate the task to yourself and approve the request by doing the following:

1. Click Delegate Business Request from any tab of the opened business request.
   
   

    

2. In the Add Additional Approvers modal, search for and select yourself from the Select a Person field and then click Add Additional Approvers.
   
   

    

   You should see you now have the ability to make a decision as indicated by the Decision buttons.
   
   

    

3. Click the Decision button and select Approve.
   
   

    

4. Select a justification.
   
   

    

5. Click Submit.
   
   

    

   You should see the request has been approved.
   
   

Result

After completing these steps:

• The selected users will be removed from the group if the business request is approved.

• You can verify the removal by checking the "Accounts as Member" tab.