WAS v8.5 > Secure applications > Secure Service integration > Secure service integration > Administer authorization permissionsRemove access roles from unknown users and groups
Service integration bus security uses role-based authorization. Users and groups are assigned to access roles for specific bus resources. If a user or a group that has access roles is removed from the user repository, it becomes an unknown user. We can identify the unknown users and groups for a selected bus, and removes their access roles.
In this task, we use the dmgr console to remove access roles from users and groups for unknown users and groups.
- Click Service integration -> Buses -> security_value -> [Authorization Policy] Manage users and groups not known to the user repository The Unknown users and groups panel lists all the users and groups that have access roles assigned to them, but they are not known in the user registry.
- Select the check boxes next to multiple user and group names.
- Click Remove all roles. The access role assignments for the selected users and groups are removed.
- Save your changes to the master configuration.
Results
The access role assignments are removed from the selected users and groups. The Unknown users and groups panel is updated to show the changes to the role type assignments.
Related concepts:
Messaging security
Role-based authorization