Hi Venu,
To answer your questions:
- Yes you use NWBC to delete the roles as you mentioned. However, pay attention to the prompt that you receive after choosing delete. Depending on your configuration parameters, you can choose to delete the physical roles from the target system(s) in addition to the GRC system's repository, or you can delete from the GRC repository only.
- Yes it is okay to delete the roles from the target system before the GRC system. Deleting in the GRC system simply prevents the role from being added within an Access Request. FYI - role deletions in production should be made via transporting to ensure landscape consistency.
-Ken
