Good Morning Walter Xavier.
First to say is that 'safex' doesn't have the option to remove a user from a particular global group.
You would need to delete the user and redefine it again without that specific global group.
This is a sample of the XML file for the safex command:
<?xml version='1.0' encoding='UTF-8' standalone='no'?>
<Safex>
<Attach label="Service Catalog"/>
<Remove>
<User folder="/" name="user1">
</User>
<User folder="/" name="user2">
</User>
<User folder="/" name="user3">
</User>
</Remove>
<Add>
<User folder="/" name="user1">
<GroupMembership>tech</GroupMembership>
</User>
<User folder="/" name="user2">
<GroupMembership>support</GroupMembership>
<GroupMembership>tech</GroupMembership>
</User>
<User folder="/" name="user3">
<GroupMembership>support</GroupMembership>
<GroupMembership>tech</GroupMembership>
</User>
</Add>
</Safex>
The 'Remove' tag will remove just the Application Details of the user.
And then the 'Add' tag will add the new application details.
Then run the following command on those files, as necessary:
safex -u Eiamadmin -p {Password} -f {FileName.xml}
Kind regards, Louis van Amelsfort.