To amend my reply, if you are not using an LDAP server, you can access the expression catalog on the role mapping rule and then select the expression to delete from the drop down and then click delete ... View more