What happens when I remove a default app from a group?

When you remove a default app from a group, new members stop getting it. For members who already have the app, you choose what happens.

If no current member would lose access, Cakewalk just asks you to confirm. Members who still get the app through another group never lose it.

Otherwise Cakewalk shows how many members would lose access and offers three options:

• Create remove access requests: each affected member gets a "Remove access" request, which runs through the app's removal policy. Agent Cake removes the access where auto provisioning is set up. Everywhere else, someone gets a task to remove it.

• Remove access as admin action: Cakewalk records the removal for every affected member right away. No requests and no tasks are created, so make sure the access is actually removed in the app.

• Leave access unchanged: the app stops being a default for new members, and current members keep their access.

Pending "Grant access" requests for the app from affected members are canceled. The dialog shows how many before you confirm.

If the app is provisioned through your identity provider

Access there follows group membership in your identity provider, so removal happens anyway. Cakewalk records it, even when you choose Leave access unchanged.

If the app's owner is in the group

The app owner always keeps their access. If the removal would take access away from the owner, Cakewalk stops it and asks you to change the app owner first. Leave access unchanged is not affected.

Moving an app between groups

Add the app to the new group first, then remove it from the old one. Members of both groups keep their access throughout.

Learn more: Groups and Role-Based Access Control