Removing Members From And Deleting An i OS Group Profile
June 19, 2013 Hey, Joe:
We’re cleaning up some of our IBM i operating system user groups and we need to remove 100 users from a group profile. Is there a way to do that without having to go into each user profile and individually remove their group memberships? We also need to delete some of the group profiles themselves. I’m on i 6.1.
This is really easy to do if you use the System i Navigator (OpsNav) program that comes with IBM i Access for Windows V7R1M0. Here’s how to use OpsNav to: 1) remove a group of users from an IBM i group profile; and 2) remove a group profile from the system.
Removing A Group Of Users From An IBM i Group Profile
Go into OpsNav and open the Users and Groups→Groups node, you’ll see a screen that looks something like this.
(Click graphic to enlarge.)
Scroll down to the group profile entry you want to modify and click on it. A list of all the user profile members belonging to that group will appear in the right-hand pane of OpsNav. Highlight all the user profile names that you want to remove from this group.
Once you have the names you want to remove highlighted, right-click on the highlighted list of users. Click on the Remove from Group option from the pop-up menu that appears. System i Navigator will then go through and remove the group membership from every user profile that was highlighted, making fast work of this job without having to open each individual user profile.
Using OpsNav To Delete A Group Profile
You can also use OpsNav to delete your group profiles, but there are a few tricks to remember when deleting a group profile. First, you have to remove all the user profile memberships associated with that group before you can delete the group profile. OpsNav will error out if you try to delete a group profile that still has members.
Second, you have to account for any objects the group profile owns or is authorized to before you can delete the group profile. The system will refuse to delete any profiles that own objects. Here’s the drill for deleting a group profile after you’ve cleared out its membership list.
On your target system, expand the Users and Groups→Groups node in OpsNav. Right-click on the group profile you want to delete and select Delete from the pop-up menu that appears. You’ll see a screen that looks like this.
(Click graphic to enlarge.)
Take one of the following options for the system to resolve object ownership as OpsNav deletes your group profile.
And that’s how you can use OpsNav to remove user profiles from a group profile and delete a group profile from the system.
Follow Me On My Blog, On Twitter, And On LinkedIn
Check out my blog at joehertvik.com, where I focus on computer administration and news (especially IBM i); vendor, marketing, and tech writing news and materials; and whatever else I come across.
Joe Hertvik is the owner of Hertvik Business Services, a service company that provides written marketing content and presentation services for the computer industry, including white papers, case studies, and other marketing material. Email Joe for a free quote for any upcoming projects. He also runs a data center for two companies outside Chicago. Joe is a contributing editor for IT Jungle and has written the Admin Alert column since 2002.