Please check if you have 'Send Pending LDAP Process' running at the same time when role was removed. It actually adjusts the roles for users too. The id -'FUSION_APPS_HCM_ESS_APPID' comes from that process.