Forum .LRN Q&A: Re: dotlrn-admin priviledges are not revoked
group::add_member -group_id $group_id -user_id $user_id
and the one to remove (packages/dotlrn/www/admin/admin-remove.tcl):
group::remove_member -group_id $group_id -user_id $user_id
It looks like the user is removed from the group but permissions on child objects are not removed or something like that.