I have a device group, and I am deleting devices from it, but they keep coming back. What may be wrong ?

book

Article ID: 103075

calendar_today

Updated On:

Products

CA Privileged Access Manager - Cloakware Password Authority (PA) PAM SAFENET LUNA HSM CA Privileged Access Manager (PAM)

Issue/Introduction

We have a Device group name "Mygroup" which is adding random devices.
Even if we remove devices from the group, it still holds those devices in the group and even though there is no error deleting them, the group gets filled up again next time it is viewed.

Cause

PAM keeps in a table in its database a list of the different devices and the device groups they are assigned to. The deletion operation implies removing the corresponding record from the table. In the GUI, this translates into devices being removed from groups, and also the group information being deleted from the Groups tab of each device. If, for whatever reason, when devices are removed from a group this operation fails, the group will be left unaltered. One will receive confirmation in the Group dialog that devices have been deleted, but the association will still be there. The next time the device group is viewed, the devices will be back

Environment

CA PAM 2.X and 3.X

Resolution

To solve this problem, go to each device you want to remove from the group and in the Group tab, delete the desired group name from the list of groups the device is member of. Verify that the device disappears afterwards from the problematic group and also that the group name is not back in the device Groups assignment