How to Remove Users or Groups from Role
When you remove users or Active Directory/LDAP groups from a role, any administrative rights or applications assigned to that role will no longer apply to those users. For example, if you have assigned the Box application to that role ABC, then users removed from that role will no longer have SSO access to Box.
To remove a role member: