unable to delete CMC user permanently

[former_member671877]

I am deleting a user in CMC portal but after next refresh it gets available in CMC. Tries to delete alias and disabling the account but didn't work, please help here.

[VijayetaSharma · Accepted solution]

Thanks for sharing the snapshots. As the auth is SAP based, users aliases are pulled from connected BQ1 system. This is based on the BW roles mapped in Authentication>SAP>Role Import tab. User will be added from source system, exist.

Here are two things you can do-

• Remove user from source system. In your case remove the user from BQ1
• At-least remove the roles (mapped in BI) from users profile in BQ1. Next refresh will remove the user from BI side and wont add user ID again until user is added into the role again.
• Other options falls under best practice - BI creates (automatically) user only when user try to login. This is how your production setup should be. There are time where user may use BW extensively but never use BI. Why waste named license for users who never logon to the system. Beside if user change mind and wanted to use BI, system automatically create BI aliases. This is how the setup should be unless you are using multiple authorizations and ID's exist for same user. For this you need to use "Update Role Only" option for scheduling and remove user creation

Note: Adding user into deleted or inactive flag in BW side have no impact in BI side. BI just checks role inclusion in BW system and import user. So it is important that role is removed form user profile (in case you do not want to remove user form BQ1).

Appreciate if you flag this as helpful answer, in case this solves your issue.

Thanks,
Vijayeta

[former_member671877 · Accepted solution]

Thank you so much Vijayetya,yes I found that user in BQ1 and I will delete it, I really appreciate your detailing thank you!!!

[VijayetaSharma]

Hello bodke,

most likely users are updated via a batch job, may be from and AD/LDAP group. Check for the type of user user (LDAP/AD), go to the respective Authentication> add-in in CMC and uncheck the user update setting.

Example for AD - change "Create new aliases when the Aliases Update occurs" to Create new aliases only when a user logs on"

or

remove the user from the ad-group used for syncing in CMC.

Appreciate if you flag this as helpful answer, in case this solves your issue.

Thanks,
Vijayeta

[former_member671877]

I have unchecked the highlighted option ->update and again run the SAP job(Authentication->SAP->User update), but still this unwanted user is available in the system.

[VijayetaSharma]

Did you manual deleted the user first?
Can you right click and go to the property of the user ID. Confirm what you see as aliases.

[former_member671877]

Yes, I manually deleted the user first, then did the above settings then the user was not available in CMC (changed alias update option like DIAG:01) but the moment I run SAP job (SAP->User update->Updates roles and aliases(DIAG: 02) User is getting available in the system again.

DIAG:01

DIAG:02