Removing Security Roles

Security Roles allow you to custom-craft specific permissions for the users loaded into your CloudRadial tenant. Permissions affect the overall visibility and general functionality of every feature within your portal.

Removing a security role can make sense in instances where you no longer have a purpose for that particular role, or if you're hitting your 10 custom-role limit (the exception being CloudRadial CSA Enterprise, which comes with unlimited roles). 

This article shows how to remove a role from the CloudRadial system as well as how to remove it from a specific user, as well as what happens when a user is left without an assigned role. 

• How to Remove a Security Role from the System
• How to Remove a Security Role from a User
• What Happens to Users Without Any Roles?

How to Remove a Security Role from the System

To remove a security role from the system:

1. Navigate to Partner > Security within CloudRadial CSA or Portal 365
2. Select the Roles tab at the top
3. Select the role you wish to remove
4. Use the Red Trashcan icon at the top right to remove the role

You'll see a checkbox that asks for your acknowledgement - any users assigned this role will be converted to the role you have set as a default role. 

• This only occurs if a user is left without any roles. Users must be assigned at least one role.
  
  
• If a user has more than one security role assigned to them, and you delete one of their assigned roles, only the role you deleted will be removed. They will not be set back to the default role. 

How to Remove a Security Role Assignment from a User

If you have assigned a role to a user and wish to remove it from them, you can do so in two places:

• From Usage > Users within the individual company (requires access to that company as well as access to their Usage > Users area in the Feature Set)
  
  OR
  
  
• From Partner > Clients > Users (tab)

We strongly recommend managing user security roles via Partner > Clients > Users (tab) for ease of access to users across companies. Ultimately, it works better at scale.

When accessing a user list in either area:

1. Search for and select the user that you wish to remove the role from
2. Select their Role Assignments tab
3. Select the Red X next to the security role you wish to remove
   
   
   
   
4. Select the Delete button on the pop-up asking for confirmation
5. Select Submit to save your selection

While the process for removing roles is straightforward, there are a few things to note:

1. Only users with multiple roles can have roles removed.
   • You cannot remove a role if it is the only role assigned to the user, as they must have at least one security role assigned to them. 
     
     
2. You cannot delete roles that have inherited role assignments using User Groups.
   
   
   • If a Role Assignment is giving that user a role by way of their association to a User Group, you will need to remove the Role Assignment or remove that user from the User Group.
     
     
   • You'll be able to spot this easily - under the individual user's Role Assignments tab, you'll see the Attribution column. This will help you quickly understand where they're getting their security role from. Other than Direct assignments, you will be able to see the Role Assignment because it will say Inherited from [User Group]

What Happens to Users Without Any Roles?

Users in CloudRadial may have multiple roles.

However, they must have at least one role assigned to them. If all roles are removed by way of manual deletion and the deletion of Role Assignments, the user will be reverted to your default role.

Learn more about how to set a default role by reading this article.