This section describes different ways to deny granted roles. There are several reasons why you may need to deny a role. You will find below some non-exhaustive examples:
You may need to free an already granted role because the granted member does not need it anymore. For example, a member who has been granted a role has left the company and you want to grant it to a new hire.
An already granted role has expired. A Not available label is displayed in front of the role in the user details dialog box and it can be denied as any other type of role.
Important:
If they have been used once, licenses are locked for thirty days, and cannot be removed until that period of time is over. Then you must wait two hours after the user has logged out before denying a role.