+'USER' is either:
++
+--
+* The real user ID (see man:getuid(3)) of a process as seen
+ from the root user namespace (see man:user_namespaces(7)).
+
+* A user name.
++
+The connected LTTng session daemon (see man:lttng-sessiond(8)) performs
+the user name resolution on removal from the user ID inclusion set.
+--
++
+Only available with option:--kernel option.
+
+option:--vuid[='VUSER'[,'VUSER']...]::
+ For each 'VUSER' argument, remove 'VUSER' from the virtual user ID
+ inclusion set of the selected recording session and domain.
++
+'VUSER' is either:
++
+--
+* The real user ID (see man:getuid(3)) of a process as seen
+ from the user namespace (see man:user_namespaces(7)).
+
+* A user name.
++
+The connected LTTng session daemon (see man:lttng-sessiond(8)) performs
+the user name resolution on removal from the virtual user ID inclusion
+set.
+--
+
+option:--gid[='GROUP'[,'GROUP']...]::
+ For each 'GROUP' argument, remove 'GROUP' from the group ID
+ inclusion set of the selected recording session and domain.
++
+'GROUP' is either:
++
+--
+* The real group ID (see man:getgid(3)) of a process as seen from the
+ root user namespace (see man:user_namespaces(7)).