Remove a user fails (manage remove <user>) if the user has any particular permissions -- first remove the permissions, then the user.