Hi,
Or a simple etautil "masschange" against the GUs to remove your role as following:
etautil -u <yourAdminID> -p <yourAdminIDPass> masschange 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName=<yourFilter> to -eTRoleDN='eTRoleName=<yourRoleName>,eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=<yourDomain>'
Note: There will not be any sync process involved since you do not specify eTSyncDelete=1
e.g.: (Windows scripting)
SET ETAHOME="C:\Program Files (x86)\CA\Identity Manager\Provisioning Server"
%ETAHOME%\bin\etautil -u superadmin -p secret masschange 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName=* to -eTRoleDN='eTRoleName=MyADRole,eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=im'
Philippe.