Remove all Global Users member from Provisioning Role using etautil command

Products

• CA Identity Suite

Issue/Introduction

Need an etautil command syntax to remove all Global Users members from a Provisioning Role.

 

Environment

Release : 14.2

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Resolution

Run from Provisioning Manager node that is connecting to vApp:
Use the first command if just want to remove the role but not try deleting accounts.
Use the second command if wanted to delete accounts too but it is more expensive.

C:\Program Files\Virtual Appliance Tools\CA-IM_ProvisioningManager\bin>etautil -u etaadmin -p <password> masschange 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTRoleDN='eTRoleName=redhat4,eTRoleContainer
Name=Roles,eTNamespaceName=CommonObjects,dc=im' to -eTRoleDN='eTRoleName=redhat,eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=im';
Multi-object update complete (selected: 32, update requested: 32, updated: 32)
:ETA_I_1336, ETAUTIL command completed  Thu Jun 24 11:20:29 2021

C:\Program Files\Virtual Appliance Tools\CA-IM_ProvisioningManager\bin>etautil -u etaadmin -p config masschange 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTRoleDN='eTRoleName=redhat4,eTRoleContainer
Name=Roles,eTNamespaceName=CommonObjects,dc=im' to -eTRoleDN='eTRoleName=redhat4,eTRoleContainerName=Roles,eTNamespaceName=CommonObjects,dc=im' eTSyncDelete='1'