selang Reference Guide › selang Commands › selang Commands Reference › rm[x]usr Command—Delete User Records

rm[x]usr Command—Delete User Records

Valid in the AC environment

The rmusr and rmxusr commands remove users from the CA ControlMinder database, and also remove references to the user's record that exist in CA ControlMinder group records.

rmxusr removes an enterprise user from the CA ControlMinder database. rmusr removes an internal user from the database. The rmusr command can, optionally, remove the user from the native environment as well.

Note: There may be occurrences in the database of the user that rm[x]usr does not delete. For example, the user could be the owner of a group, the owner of other records, or in an access control list for a resource. Use the ch[x]grp, ch[x]usr, ch[x]res, and authorize commands, as required, to manually change ownership and remove access authorities relating to the user record you want to delete. Alternatively, use the sepurgedb utility to clean up inconsistencies in the database automatically.

Note: The rmusr command also exists in the native environment but operates differently there.

To execute the rm[x]usr command you need to meet at least one of the following requirements:

• You have the ADMIN attribute.
• The user record to be deleted is within the scope of a group in which you have the GROUP‑ADMIN attribute.
• You are assigned the DELETE authority in the access control list of the USER record in the ADMIN class.
• You are the owner of the user record.

ru is a synonym of rmusr.

rxu is a synonym of rmxusr.

This command has the following format:

{rmusr|ru | rmxusr | rxu} { userName | (userName [,userName...]) } \

[unix|nt] [appl(homedir=yes)]

appl(homedir=yes)

(UNIX only). Deletes the user's home directory

This argument checks for the existence of the user's home directory in /home, /tmp or /users. If the home directory located in another directory, edit the S99DELETE_postrmusrdir.sh script to incorporate it.

Note: You must specify the unix option before you specify this option.

nt

Deletes the user from the Windows environment, in addition to deleting the user from CA ControlMinder.

Valid only for rmusr.

userName

Defines a user record.

unix

Deletes the user from the UNIX environment, in addition to deleting the user from CA ControlMinder.

Valid only for rmusr.

Example

The following command deletes enterprise users Terry and Jane from CA ControlMinder:

rxu (Terry, Jane)

More information:

ch[x]usr Command—Change User Properties

show[x]usr Command—Display User Properties

rmusr Command—Delete UNIX User

rmusr Command—Delete a Windows User