You can remove users from user groups that are stored in the internal database. When you remove a user from a user group, the user is no longer managed as part of the user group. Removing a user from a user group does not delete the user's data from the identity source that contains the user record.
If you want to remove users from user groups that are stored in an LDAP directory, you must use the native LDAP directory interface.
In the Security Console, click Identity > User Groups > Manage Existing.
Click the appropriate user group, and select Member Users.
Use the search fields to find the user that you want to remove from the user group. Some fields are case sensitive.
Click the user that you want to remove, and click Remove From Group.