Etautil - How to Check User Sync and Sync User With Roles

Products

• CA Identity Suite
• CA Identity Manager

Issue/Introduction

Etautil commands which can be used to report on and fix the impacted users/accounts which are missing the account template references or where the accounts are missing completely or where accounts are extra.

 

Environment

All Identity Manager

Resolution

Below are the etautil example commands:

 

This etautil is the equivalent of the "Check User Synchronization" found in the Provisioning Manager. Running with * for all users could be expensive.

etautil -u USER -p PWD select 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName='*' list eTSyncUsers eTSyncDelete

 

This etautil is the equivalent of the "Synchronize User With Roles" found in the Provisioning Manager to create missing accounts or add missing account templates to accounts.

etautil -u USER -p PWD update 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName='GU_Name' to eTSyncUsers='1'

 

This etautil is the equivalent of the "Synchronize User With Roles" found in the Provisioning Manager to delete extra accounts.

etautil -u USER -p PWD update 'eTGlobalUserContainerName=Global Users,eTNamespaceName=CommonObjects' eTGlobalUser eTGlobalUserName='GU_Name' to eTSyncDelete='1'