---
title: "Remove-VBRUserRoleAssignment"
description: "Removes a role from a user or a user group. If the four-eyes authorization is enabled, you cannot run this cmdlet. For more information, see the Four-Eyes Authorization section in the User Guide for VMware vSphere."
canonical: "https://helpcenter.veeam.com/docs/vbr/powershell/remove-vbruserroleassignment.html"
breadcrumb: "Veeam PowerShell Reference > Veeam PowerShell Reference > Backup Infrastructure > Roles and Users > Remove-VBRUserRoleAssignment"
dateModified: "2026-08-19"
---

# Remove-VBRUserRoleAssignment

## Short Description
Removes a role from a user or a user group.

::: note

If the four-eyes authorization is enabled, you cannot run this cmdlet. For more information, see the [Four-Eyes Authorization](https://helpcenter.veeam.com/docs/vbr/userguide/four_eyes_authorization.html?ver=13) section in the User Guide for VMware vSphere.

:::

**Product Edition**: Standard, Enterprise, Enterprise Plus, Veeam Universal License

## Syntax
```
Remove-VBRUserRoleAssignment -Assignment <VBRUserRoleAssignment> [<CommonParameters>]
```

## Detailed Description
This cmdlet removes a role from a user or a user group.

::: note

You cannot remove the role of the last administrator. This is to prevent a situation where no administrator remains.

:::

## Parameters

<table style="width:100%;" class="Blue_Table">
      <tr style="vertical-align:top">
        <th style="width:20%;">
          <p>Parameter</p>
        </th>
        <th style="width:20%;">
          <p>Description</p>
        </th>
        <th style="width:20%;">
          <p>Type</p>
        </th>
        <th style="width:10%;">
          <p>Required</p>
        </th>
        <th style="width:10%;">
          <p>Position</p>
        </th>
        <th style="width:10%;">
          <p>Accept Pipeline Input</p>
        </th>
      </tr>
      <tr style="vertical-align:top">
        <td>
          <p class="Table_Text_Bold"><span class="Table_Text_Bold">Assignment</span></p>
        </td>
        <td>
          <p>Specifies a role assignment that you want to remove</p><p>Accepts the <code>VBRUserRoleAssignment</code> object. To get this object, run the <a href="get-vbruserroleassignment.md"><code>Get-VBRUserRoleAssignment</code></a> cmdlet.</p>
        </td>
        <td style="width:10%;">
          <p><a href="vbruserroleassignment.md"><code>VBRUserRoleAssignment</code></a></p>
        </td>
        <td style="width:10%;">
          <p>True</p>
        </td>
        <td style="width:10%;">
          <p>Named</p>
        </td>
        <td style="width:10%;">
          <p>True (ByPropertyName, ByValue)</p>
        </td>
      </tr>
    </table>

`<CommonParameters>`

This cmdlet supports Microsoft PowerShell common parameters. For more information on common parameters, see [ Microsoft Docs](https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_commonparameters?view=powershell-7).

## Examples

::: example
### Example 1. Removing All Role Assignments from User

This example shows how to remove all roles that are assigned to the `User\Administrator` user if it has more than one role assigned.

```
Get-VBRUserRoleAssignment -Name "User\Administrator" | Remove-VBRUserRoleAssignment
```

:::

::: example
### Example 2. Removing Custom Role from User

This example shows how to remove a custom role that is assigned to the `User\Administrator` user.

```
$role = Get-VBRUserRoleAssignment -Name "User\Administrator" -RoleEntity (Get-VBRRoleEntity -Name "r1")
Remove-VBRUserRoleAssignment -Assignment $role
```

Perform the following steps:

1. Run the [`Get-VBRUserRoleAssignment`](get-vbruserroleassignment.md) cmdlet. Specify the `Name` and `RoleEntity` parameter values. Save the result to the `$role` variable.
2. Run the `Remove-VBRUserRoleAssignment` cmdlet. Set the `$role` variable as the `Assignment` parameter value.

:::

::: example
### Example 3. Removing Built-In Role from User

This example shows how to remove a built-in role that is assigned to the `User\Administrator` user.

```
$role = Get-VBRUserRoleAssignment -Name "User\Administrator" -Role BackupOperator
Remove-VBRUserRoleAssignment -Assignment $role
```

Perform the following steps:

1. Run the [`Get-VBRUserRoleAssignment`](get-vbruserroleassignment.md) cmdlet. Specify the `Name` and `Role` parameter values. Save the result to the `$role` variable.
2. Run the `Remove-VBRUserRoleAssignment` cmdlet. Set the `$role` variable as the `Assignment` parameter value.

:::

## Related Commands

[`Get-VBRUserRoleAssignment`](get-vbruserroleassignment.md)