{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":6754,"path":"customer-service-management/fix-csm-external-user-roles-task1.md","title":"Fix roles for external users with possible non-intentional internal role assignments","bundle":null,"doc_type":null,"release":"australia","body":"\n# Fix roles for external users with possible non-intentional internal role assignments\n\nReview and fix roles for external users that may have non-intentional internal role assignments.\n\n## Before you begin\n\nRole required: csm\\_guided\\_setup\\_user, user\\_admin, sn\\_crm\\_foundation\\_admin, and system\\_scheduler\\_admin\n\n## About this task\n\nYou must not assign internal roles to external users. Use this procedure to review and fix the contacts and consumers that may have the following role assignments:\n\n-   snc\\_internal role only\n-   snc\\_internal role and one or more external roles\n\n**Note:** This guided setup task uses scheduled jobs to identify and fix role assignments. When fixing role assignments, the scheduled job fixes 3000 users at a time. If there are more than 3000 users in this group, change the configuration of the job so that it runs periodically.\n\n## Procedure\n\n1.  Navigate to **All** > **Customer Service** > **Administration** > **Guided Setup** and select **Get Started**.\n\n2.  In the Fix External User Role Assignment category, select **Get Started** and then select **External users with possible non-intentional internal role assignment**.\n\n3.  Run the scheduled job to tag users that may have non-intentional user role assignments.\n\n    Users are tagged with the **Ext-user-non-intentional** tag.\n\n4.  Review the list of tagged users and remove the tag from any users for which you don’t need to fix role assignments.\n\n    If necessary, configure the list to display the Tag column.\n\n5.  Run the scheduled job to fix the role assignments for the users with the **Ext-user-non-intentional** tag.\n\n    This scheduled job makes the following changes:\n\n    -   For users with the snc\\_internal role only, it removes the snc\\_internal role and adds the snc\\_external role.\n    -   For users with the snc\\_internal role and one or more external roles, it removes the snc\\_internal role.\n    This scheduled job runs all the insert/deleted business rules on the User Role \\[sys\\_user\\_has\\_role\\] table.\n\n\n"}}