// Run DEBUG NOW only. Do not run EXECUTE NOW.  This will give you a list of users that are NOT ITIL USERS.
//  This list of NON ITIL users will show up in the User Logs.     JWJ0215 02.19.24
ClearUserLog();
var gr = new GlideRecord('sys_user_has_role');
gr.addEncodedQuery('role.name=certification');
gr.query();
while (gr.next()) {
    var gr2 = new GlideRecord('sys_user_has_role');
    gr2.addEncodedQuery('user=' + gr.user.sys_id + '^role.name=itil');
    gr2.query();
    if (!gr2.hasNext()) {
        //gs.print(gr.user.getDisplayValue() + ' ' + gr.role.getDisplayValue());
                                UserLog(gr.user.getDisplayValue() + ' ' + gr.role.getDisplayValue());
    }
}