Unable to Remove User from User Structure
Hi,
We are having trouble removing a user from the system.
System has been upgraded from v5.1 RevD FP4 to v6.0. As a part of the project we are also doing some housekeeping to the system by removing unnecessary objects.
One of these objects is a User that hasn't existed in a while. User isn't part of the windows domain. In 800xA system the user is a part of the IndustrialITAdmin and IndustrialITUser groups.
When trying to delete/remove this user from either group, we get an error:
"[Error] Operation rejected by Adminstrators - <domain>\IndustrialITAdmin:User Group Definition (Structure hook: Child remove) Transaction Cancelled"
We would appreciate your help on this matter.
-PTe
Answers
Have you tried to use the "Configuration Wizard" and/or the "Configuration Console".
Maybe one of these 2 tools are able to remove the users!
br
Reinhard
The service account and account used to create the system becomes with a special protection (aspect key) that prevent them from being removed.
After backup/restore you may want to purge old accounts, eg old service account. This requires you to remove a key on (I believe) the User Structure aspect's Details... window (I believe second tab).
I can't remember the key name or aspect having it right now in my sofa at home, but something like "Service user", etc. Compare with other accounts and you will notice the aspect key. If not the User Structure aspect, try the User Definition aspect.
Likewise, you can add this key to other accounts to prevent them from accidental removal.
Hi,
According to Stefans instructions, a certain aspect key must be removed from the old Service user.
The aspect key can be found by navigating in the user structure to the affected user, select aspect user definition, look at aspect details tab Aspect info and remove the key "Service User". After removing the aspect key, the user can be removed from the system.
We have not yet tested this, but I beleieve this is what Stefan was reffering to.
See attachment.
-PTe
Thanks for your answer PTe.
The definition Service Account Key is placed in Details-Aspect Info from Aspect Security Definition and User Definition.
I can't remove this Aspect Key:
Operation failed to execute!
[Error] Windows Account already assigned to user 800xA\800xAService
Add new comment