Login
Register
Search
Home
Forums
Jobs
LawsonGuru
LawsonGuru Letter
LawsonGuru Blog
Worthwhile Reading
Infor Lawson News Feed
Store
Store FAQs
About
Forums
Infor / Lawson Platforms
S3 Security
Delete a Role in LSF9
Home
Forums
Jobs
LawsonGuru
LawsonGuru Letter
LawsonGuru Blog
Worthwhile Reading
Infor Lawson News Feed
Store
Store FAQs
About
Who's On?
Membership:
Latest:
Chris Radcliffe
Past 24 Hours:
0
Prev. 24 Hours:
0
Overall:
5187
People Online:
Visitors:
275
Members:
0
Total:
275
Online Now:
New Topics
S3 Customization/Development
Cobol - Extract Current Time
4/24/2024 7:21 PM
How do you extract just the Current System Time in
Lawson Landmark
LPL INSTR Functions
4/5/2024 8:32 PM
I'm writing a simple report using the Create R
Infor SCM
Translating 856 to get the ~ REF^CN^ field
4/3/2024 8:24 PM
We are trying to get the tracking number which is
IPA/ProcessFlow
Sample XML file create Flow
4/3/2024 3:43 PM
Hello everyone, I am new to creating XML files
Lawson S3 HR/Payroll/Benefits
bn105 error message
3/26/2024 6:40 PM
I need to change some of the set ups in our Life I
IPA/ProcessFlow
IPA executing Job
3/13/2024 7:08 PM
New to the IPA world and was wondering, can an IPA
Lawson S3 HR/Payroll/Benefits
Life Age Reduction on benefits plans
3/12/2024 7:15 PM
For our optional life we have an age based coverag
Lawson S3 HR/Payroll/Benefits
BN53.1 Add-In
3/7/2024 3:31 PM
We are migrating to Solstice. They require a
Lawson Business Intelligence/Reporting/Crystal
Domain Name Change
3/5/2024 7:45 PM
Our domain name needs to change and was hoping I c
S3 Customization/Development
Cobol calling Shell Script
2/29/2024 1:27 PM
Has anyone created or modified a Lawson Cobol prog
Top Forum Posters
Name
Points
Greg Moeller
4184
David Williams
3349
JonA
3288
Kat V
2984
Woozy
1973
Jimmy Chiu
1883
Kwane McNeal
1437
Ragu Raghavan
1351
Roger French
1311
mark.cook
1244
Forums
Unanswered
Active Topics
Most Liked
Most Replies
Search Forums
Search
Advanced Search
Topics
Posts
Prev
Next
Forums
S3 Security
Delete a Role in LSF9
Sort:
Oldest First
Most Recent First
You are not authorized to post a reply.
Author
Messages
TBonney
Veteran Member
Posts: 277
5/16/2011 6:09 PM
Can a single role be deleted from multiple users in LSF9, without impacting any of the other roles, groups, etc. that are assigned to these users?
We have a role that was created and assigned to several hundred users previously. However, due to changes made since then, this role is now obsolete and unnecessary so we'd like to remove it from all users. However, we do not want any other changes to be made to these users.
Any ideas? Thank you.
TBonney
Veteran Member
Posts: 277
5/19/2011 1:25 PM
Does anyone have any ideas or feedback on this post? I see that several people have viewed it, but none have commented.
We also have an obsolete group that was created in Resource Manager & assigned to about 150 users, but which has since been replaced with another group, so it too is obsolete. I'd like to get rid of both if I can, withour effecting any of the other roles or groups presently assigned to the affected users.
Thank you for any ipnut anyone can provide.
Al
Basic Member
Posts: 17
5/19/2011 1:35 PM
I am not sure if you can mass delete somehow as I've never found a way. My experience has been you need to remove the security classes from the role to deleted, remove the role from each user account, then delete the role in Resource Manager. You will get an error message if you try to delete a role that is being used on RM user accounts.
TBonney
Veteran Member
Posts: 277
5/27/2011 4:21 PM
Thank you Al. That's what we have found as well, but were wondering if anyone had found any way to work around it. Thanks again.
Lee Wall
Basic Member
Posts: 4
6/1/2011 11:21 AM
Do you have Processflow Integrator? The only way I've found to mass delete a role from multiple user records is to use the Resource Query and Resource Update nodes in processflow integrator. Use the Query node to indentify all users with the oudated role, then the resource update node to remove the role from the user record.
Chris
Advanced Member
Posts: 23
6/1/2011 11:27 AM
The loadusers command can be used to replace a user (and all associated groups and roles) in Lawsom RM. We currently have a Perl script that automatically builds the necessary XML input file for loading new users. If you could query LDAP (which can be done with a Perl module), it should be possible to build the correct XML input to replace an existing user with a new version including whatever changes you require (adding or removing roles, etc.). We are planning on trying this.
TBonney
Veteran Member
Posts: 277
6/1/2011 11:45 AM
Thanks Lee Wall and Chris!
Basically what Chris suggested is how we did it as well. We ran scripts to create files indicating what all the current roles, groups, etc. are assigned to each individual and then updated the files by removing the target role we wanted to get rid of, then ran the loadusers to update using the newly edited xml files. However, this process was a long and involved one, so we are wondering if there might be a more efficient method out there.
Lee, would you be able to provide any additional information on how to utilize Process Flow to accomplish this? We do have PFI, but have never used the Resource Update node and are a little skiddish about doing so.
Thank you.
KK - Infor
Veteran Member
Posts: 61
6/1/2011 7:28 PM
You can achieve this using PFI/ PFX
- Have a Resource query node Inquire all the Roles/ Groups etc.
- Assign it to a variable
- Using Branch/ JavaScript strip out/ replace the ones you don't need
- Assign the rest using the Resource Update again.
This is a little more involved process, however works like a charm since it uses the standard Lawson tools.
TBonney
Veteran Member
Posts: 277
6/2/2011 11:18 AM
Thanks KK!
...and doing so through Process Flow has no impact to the user whose profile you're updating? (i.e. - no change in password is required, etc.)
That's our biggest concern, to be able to remove these obsolete roles without needing to mass communicate the change to all "affected" users, since it really has no impact to the end users.
Thank you.
You are not authorized to post a reply.