When a security role is manually removed from the UI, that same security role will never be added back again to the same user by the SIS import process.
How to manually remove an assigned role in SS&E:
- Navigate to the People Administration page from Administration - People & Roles - People, found here.
- Search for the appropriate person by name or ID, then click on their Institution Id.
- From the list of "Security Roles", find the role to remove and click on the red icon to the right.
-
-
- If a role was removed by mistake, add the role back by selecting +Add and selecting the appropriate role from the Security Roles dropdown.
-
-
- Refresh the student/staff view to view the new role permissions associated with the individual.
- Removing a role from the Person data feed imported via the SIS Import Process/importing a person record with a blank role will NOT remove a role that was imported in the past and displays in SS&E.
- Therefore, removing a role must always be done manually in SS&E.
Furthermore, once a role is removed manually from a person record in SS&E, then a future SIS import Job cannot re-add the same removed role to the user. If needed, the same role would need to be added manually from the Person User Details.
Why are users missing a role in SS&E?
If a role is included in the Person data extract imported from the SIS yet does not display on the Person record in SS&E, this means that the same role was assigned and manually deleted in the past from the UI, and therefore the same role cannot be assigned via the SIS Import again.
By design, any past role included in the Person data extract (person.json) will NOT display in SS&E and must be reassigned manually on the Person record from here.
How to Delete a Role
To remove a role entirely from the system, from the Roles Administration page, select the role and then select "Delete" from the main menu bar.
- In order to delete a role, the role must not be used anywhere and cannot be assigned to any users.
- Trying to delete a role that is being used will "do nothing" and hovering over the Delete action will display a message stating "Cannot delete this role as it is currently being used". To find out where and how the role is still being used, check the role's Role Usage section and make sure that all role usage items show zero use. When all Role Usage items are set to zero. the delete action will work.