Return
-
Title
A 'CLI only' or 'API only' user is showing as disabled, and the option to enable is greyed out. -
Description
A CLI UserID is showing as 'disabled' when viewing the User. However, the Details tab for this user shows the 'disable' option greyed out. -
Cause
It is not possible to use the GUI to disable/enable a 'CLI only' or 'API only' UserID. -
Resolution
This UserID may be "enabled" ONLY via the Batch "Update UserIDs" function. A CLI or API Only account cannot be disabled using the GUI or via Batch Upadate.
To enable a disabled account that has somehow been locked.
Via the '/tpam' GUI use the "Batch Processing | Update UserIDs" menu.
Create a csv file with contents similar to this with the appropriate CLI UserIDs, or download the Template and populate the required fields.User, Action, Disabledyour_cli_user_name, U, NSave the file; upload it on the Batch "Update UserIDs" and process. The results should show the UserID is now enabled.