Chatta subito con l'assistenza
Chat con il supporto

Active Roles 7.6 - User Guide

Introduction Getting Started One Identity Starling Two-factor Authentication for Active Roles User or Service Account Management Group Management Computer Account Management Organizational Unit Management Management of Contacts Management of Exchange Recipients

Deleting groups

To delete groups, select them, right-click the selection, and click Delete. Then, click Yes to confirm the deletion. If you select multiple groups, clicking Delete displays the Delete Objects dialog box. To delete all the selected groups, select the Apply to all items check box, and then click Yes.

 NOTE: Deleting a group is an irreversible operation. A new group with the same name as a deleted group does not automatically assume the permissions and memberships of the deleted group. When recreating a deleted group, you need to manually add all permissions and memberships.

Steps for deleting a group

To delete a group

  1. In the console tree, locate and select the folder that contains the group.
  2. In the details pane, right-click the group, and then click Delete.

NOTE:

  • Deleting a group is a permanent operation. Once a group has been deleted, all permissions and memberships associated with that group are permanently deleted. A new group with the same name as a previously deleted group does not automatically assume the permissions and memberships of the previously deleted group. To duplicate a deleted group, all permissions and memberships must be manually re-created.
  • The confirmation message box displayed by the Delete command prompts you that you can deprovision rather than delete groups. The deprovision operation refers to a set of actions performed by Active Roles in order to prevent the use of there group. Active Roles comes with a default policy to automate some commonly-used deprovisioning tasks, and allows the deprovision policies to be adjusted as needed.
  • You can deprovision a group as follows: Right-click the group in the details pane, and click Deprovision.
  • You can use the Find function of Active Roles in order to locate the group you want to delete or deprovision. Once you have found the group, you can proceed as follows: Right-click the group in the list of search results, and click Delete or Deprovision.
  • When deleting a group, you may encounter an error message stating that access is denied. A possible cause of this error is that the group is protected from deletion. To delete a protected group, you should first go to the Object tab in the Properties dialog box for that group, and clear the Protect object from accidental deletion check box.

Deprovisioning groups

Active Roles provides the ability to deprovision rather than delete groups. Deprovisioning a groups refers to a set of actions that are performed by Active Roles in order to prevent the use of the group.

The Deprovision command on a group updates the group object in Active Directory as prescribed by the deprovisioning policies. Active Roles comes with a default policy to automate some commonly-used deprovisioning tasks, and allows the administrator to configure and apply additional policies.

Steps for deprovisioning a group

To deprovision a group

  1. In the console tree, locate and select the folder that contains the group you want to deprovision.
  2. In the details pane, right-click the group, and then click Deprovision.
  3. Wait while Active Roles updates the group.

NOTE:

  • You can deprovision multiple groups at a time. Select two or more groups, right-click the selection, and then click Deprovision.
  • The Deprovision command is also available in the Active Roles Web Interface.
  • When you click the Deprovision command, the operation progress and results are displayed. When the operation is completed, Active Roles displays the operation summary, and allows you to examine operation results in detail.
  • On a deprovisioned group, you can use the Deprovisioning Results command to view a report that lists the actions taken during the deprovisioning operation. For each action, the report informs about success or failure of the action. In the event of a failure, the report provides a description of the error situation.
  • If a deprovisioned group needs to be restored (for example, if a group has been deprovisioned by mistake), the group can be reset to the state it was in before the deprovisioning occurred. This can be accomplished by using the Undo Deprovisioning command on the deprovisioned group.
Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione