etautil; Unassign user association

Products

• CA Identity Manager

Issue/Introduction

Is there a way to "Unassign" between the global user and the endpoint account association which is equivalent to "Modify User's Endpoint Accounts" in the user console task?

Environment

Release :
Component : CA IDENTITY MANAGER

Resolution

Below is the example;

[Dynamic endpoint]

etautil -u <USER> -p <PASSWORD> -DYN delete 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName=<GLOBALUSERNAME> in 'eTDYNContainerName=<GROUP>,eTDYNDirectoryName=<ENDPOINT>,eTNamespaceName=<ENDPOINTTYPE> eTDYNAccount eTDYNAccountName=<ENDPOINTACC> relationship=USERACCOUNT;

[Active directory]

etautil -u <USER> -p <PASSWORD> delete 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName=<GLOBALUSERNAME> in 'eTADSContainerName=Users,eTADSDirectoryName=<ADSname>,eTNamespaceName=ActiveDirectory' eTADSAccount eTADSAccountName=<ENDPOINTACC> relationship=USERACCOUNT;