Sophos XGS Delete a group imported from the AD

Hi admin_idl ,

Thank you for reaching out to the community, User Group not visible on UI ?
Check user-based (match user) is not currently turned on for that rule. 

It is about a group from the Active Directory which is to be deleted and this message appears when deleting it

Seems like the user is already in some kind of configuration.

Every user gets a group as primary group in XG. So check the group name of the user and check, whether you use this group already in the modules (like WAF, SSL VPN etc.) 

REF - Support for Active Directory group memberships - Sophos Firewall

I've seen that yesterday on our firewall. "Users exist in the group" for AD imported groups.

Check who it is and then either delete the users on the firewall (keep MFA in mind) or change their group membership in AD, then all users would need to re-login to XGS so the firewall can check, that they do not belong to the group anymore. Thats the only way SFOS will remove them from the group (complicated)

Im my case it was only one user, I deleted the user then deleted the group. It was not used in configurations.

Thank you for your feedback. That's okay, but it sounds very complicated.