Connector Guides › Connectors Guide › Connecting to Endpoints › RSA Authentication Manager SecurID 7.1 Connector › Connector Specific Features › Administrative Roles › How to Remove an Administrative Role › Unassign an Administrative Role from a User Account

Unassign an Administrative Role from a User Account

If you no longer want to manage the actions a user can perform in a specific security domain using an administrative role you can remove an administrative role from a user. You can remove multiple administrative roles from a user at the same time.

To remove the administrative roles you do not want users to have

1. In the Provisioning Manager, click the Endpoints button and select the RSA SecurID 7 [DYN Endpoint] type in the Object Type drop-down list.
2. Click Search.

   The RSA 7.1 endpoints appear in the list view.

3. Right-click the endpoint on which you do not want administrative roles a user to have and then select Content.

   The Endpoint Content dialog appears.

4. In the Container tree, select the Security Domain you want to search.
5. Select User Account in the Object Type list and click then click Search.

   The accounts for the system domain you selected appear in the list view.

6. Right click the user account you want to assign and administrative role, then click Properties.

   The User Account dialog appears.

7. Click the Administrative Roles tab.

   The administrative roles that the user is assigned appear in the Assigned list, and the containers in the namespace you can search appear in the Available List Search tree.

8. Search for the administrative roles you want to unassign from a user.

   The administrative roles assigned to the user account appear in the Assigned list.

9. In the Assigned list, select the administrative role or administrative roles you want to remove from the user, then move it to the Available list, then click OK.

   The administrative role is removed from the user.