Symantec IGA

 View Only
  • 1.  Delete Provisioning user with accounts ETAUTIL

    Posted Feb 17, 2020 11:31 AM
    Hi Team :-)

    We use vApp 14.1 and want to delete the Global user with associated accounts.  But can't run etautil from PX in vApp as a command line.   So try to use Kettle to create an Etautil file with Delete Global users.  Global users are deleted, but accounts on endpoints are not.   Can't find the doc for Etautil in the Broadcom documentation.  Can't find my old doc from CA.   
    So where to find doc and what is the syntax for delete associated accounts.

    Is there a smarter way in vApp????

    Thanks in advance :-) - Jens


  • 2.  RE: Delete Provisioning user with accounts ETAUTIL
    Best Answer

    Broadcom Employee
    Posted Feb 18, 2020 07:48 AM
    When using vApp install the vapp tools.
    The best way to get to etautil is the help pages available in the provisioning manager.

    In the fire-rehire use case usually, the corp user is also removed, but in your case, you want to keep the corp user and delete everything below it.

    In the past we have asked the customer to just turn up logging using the provisioning manager GUI then perform the steps manually via the GUI then check the logs for the commands performed.

    Hope this helps.

    Bill Patton

    ------------------------------
    And, as always Perhaps there are others in the communities who have experience in doing this and we invite them to comment here also.

    Another option may be to reach out to our partner HCL Technologies to see in what way they can assist further. The Enterprise Studio team of HCL can be reached at enterprisestudio@hcl.com. https://www.hcltech.com/enterprise-studio
    ------------------------------



  • 3.  RE: Delete Provisioning user with accounts ETAUTIL

    Posted Feb 20, 2020 10:35 AM
    The link to the IDM 12.5 SP7 Provisioning Reference Guide is included. I'll look for additional content and examples published in the Communities or Support KB articles that can add to the basic etautil information.

    ------------------------------
    Enrique Torres
    Enterprise Architect
    Enterprise Studio
    HCL Technologies
    ------------------------------



  • 4.  RE: Delete Provisioning user with accounts ETAUTIL

    Broadcom Employee
    Posted Feb 18, 2020 09:52 AM
    Hi Jens
    As pointed out by Bill, with vApp tools installed on a Windows machine (which is also required if you are using any endpoints which require CCS), utilizing the Provisioning Manager for such activity could help you figure out the searches done etc.
    Are you asking how to identify and delete all accounts associated with a specific Global User? Or just asking for the etautil to remove a known account? ie
    etautil -d im -u etaddmin -p <password> delete 'eTADSOrgUnitName=Users,eTADSOrgUnitName=<OU>,eTADSDirectoryName=<ADName>,eTNamespaceName=ActiveDirectory' eTADSAccount eTADSAccountName='User123'
    Also, are these accounts not associated with any Provisioning Role assigned to a user?
    Regards
    Rinat