Change Power User to User removed access?

Summary:

Content (required):

I recently removed the power user role from two users in the identity console, and now they can no longer login. They are still listed as users, but the single sign on just loops for them. Is there some way to fix this? Or is there a step I am missing?

Version (include the version you are using, if applicable):

PBCS 23.06.60

Code Snippet (add any code snippets that support your topic, if applicable):