Unable to Remove Users or Groups from vCenter Server - Account/Group Reappears After Deletion
Article ID: 431925
Updated On:
Products
Issue/Introduction
In the vCenter UI, you are unable to delete specific users or groups from the Single Sign-On (SSO) configuration.
-
Navigate to Administration > Single Sign On > Users and Groups.
-
In the Users tab, you select an external domain (e.g., Active Directory) from the Domain drop-down list.
-
You select a user/group and click Delete, then confirm by clicking Remove.
-
The user or group is not removed from the list, or it immediately reappears.
Environment
vCenter Server 8.x
Cause
You cannot delete local operating system users or users in another domain from a vCenter Single Sign-On management interface.
Resolution
This is expected behavior. You cannot delete users or groups that originate from an external identity source or the local operating system through the vCenter SSO management interface. vCenter Server has "Read-Only" visibility into these external directories for the purpose of assigning permissions; it does not have administrative authority to modify or delete the objects within that external source.
To remove these users or groups from the vCenter view, they must be managed at the source.
Additional Information
Feedback
