Phantom Roles assigned to Everyone group

rdelange

Using TS 7.2.1 on Windows 2003 EE, which was upgraded from 6.7.2, which was upgraded from 6.5.
In the Admin UI, users have legitimate roles on branches due to their TS group membership, and those groups having been assigned particular roles. However, every user in the store has additional roles that seem to have been assigned to the "Everyone" group (note: not "iwEveryone").

There are no roles on any branches that reference the Everyone group.

However, using the iwaccess CLT as follows, shows a number of these phantom roles, which cannot be removed using this same tool.

How do I clean up all these oddball roles (the ones that reference 'Everyone')?

Examples of CLT output:
>>iwaccess all-permission-entries-of-user C2Editor1 -verbose

PRINCIPAL ROLE TYPE CONTEXT
Everyone admin group \\Server\default\main
Everyone admin group \\Server\default\main
Everyone editor group \\Server\default\main\C1
Everyone reviewer group \\Server\default\main\C1
Everyone admin group \\Server\default\main\C1
C2_Editors editor group \\Server\default\main\C2 (legit)
Everyone Site Editor group \\Server\default\main\C3
Everyone Site Editor group \\Server\default\main\C4
Everyone Marketing Manager group \\Server\default\main\C5
iwEveryone workflowUser group \\Server\iwadmin\main\workflowModels (legit)

>>iwaccess remove-permission-entry "\default\main\C3" -group Everyone -role "Site Editor"
Invalid or no permission entry

>>iwaccess remove-permission-entry "\default\main\C2" -group C2_Editors -role "editor"
success