Cannot remove (contains role) agent_workspace_user from itilDescriptionCannot remove (contains role) agent_workspace_user from itilSteps to Reproduce Log in to an affected instance Go to the role of "ITIL"Go to the Contains roles related listSelect EditFrom the slush bucket, double click on "agent_workspace_user" to remove it from the Selected bucketSaveGo back to ITIL role record the " agent_workspace_user" is still in the contains Expected: The Role "agent_workspace_user" is removed from the ITILActual Behavior: The Role is not removed from the ITILWorkaroundThis works as expected: Since inherited roles are granted indirectly from other roles or groups, direct removal isn't allowed.If you want to remove the contains role from itil, then you can follow these steps: Navigate to: <instance_name>/sys_user_role_contains.do?sys_id=12346bcf87c0130084aca571d5cb0bbeYou should be able to see the record for 'agent_workspace_user' contains role for 'itil'.Change the scope to 'ITSM Workspace' and use the Delete button on this form. This should remove the 'agent_workspace_user' contains role from itil.Related Problem: PRB1378530