I havent tried but you can give a try.
Once you remove the user from groups and de-provision the id, did you run ProvisionUsers & UpdateUsers utilities ?
Could you please try running those utilities to see if it clears such invalid sec records.. Please let us know if this has worked for you or not.!
This is all about Planning only: http://docs.oracle.com/cd/E12825_01/epm.111/hp_admin/frameset.htm?ch03s13.html
However, my question is regarding HSS and Essbase and nothing else in addition.
So this has not really helped.
Problem still exists....- any other ideas?
Thanks and Regards