Hi,
Some users inherit and adsgroup from a system role but those users had already the adsgroup. Xorigin is marked as 3 (1(direct)+2(inherit)) if I modify all those 3 to 2 it will be any problem? the thing is that i want to be automatically removed when the user doesnt have the system role
Modifying XOrigin is the wrong way. This column is an indication column that tells how the assignment has taken place. You need to remove the direct assignments then the xorigin will also change the value…
Use the object browser and delete all with XOrigin = 3 in the table. They will be converted to XOrigin=2 , nothing will be delete from the users.
