Unable to Remove User from a Group that is Managed by a Group Rule which Assigns Users to Multiple Groups
Last Updated:
Lifecycle Management
Okta Classic Engine
Okta Identity Engine
Overview
Admins are receiving the following error message when attempting to remove a user from a group that is managed by a group rule that assigns users to multiple groups (more than one):
The user Username cannot be removed from the group automation test because this group is managed by the following group rule(s): Group rule name.
These rules manage multiple groups, so users cannot simply be added to the rules' exclusion lists without being removed from other groups as well.
Applies To
- Group Rules
Solution
This behavior is expected and cannot be changed. The user must be removed from the parent group before being added to the exception list.
