Page 1 of 1

Groups with special characters in GroupId.

Posted: Wed May 11, 2016 3:34 pm
by rkashyap
In our shop, there are Active Directory groups which have special characters (hash, space etc) in GroupId.

DataStage Roles were granted to these groups using (IS Console -> User and Groups -> Groups ->)"Add Roles to Multiple Groups" page of in "IS Console", which apparently does not have same edits as "Open Group" page.

We want to remove all DataStage roles from these groups.

On attempting to remove these roles thru "Open Group" system gives error message
The ID you entered contains invalid characters, re-enter the ID with valid characters and try again. For a list of valid characters, click the help icon.
Please share your thoughts.

Posted: Wed May 11, 2016 6:19 pm
by JRodriguez
The DirectoryCommand.sh from the ASBNode directory allow almost all operations that one could execute from the Console. For the special characters just surround the value with quotes

DirectoryCommand.sh -rm_grp_roles 'Group DSDev' RoleId
Without the RoleId all roles will be removed from the group. To find out the RoleId use below
DirectoryCommand.sh -list ROLES

Posted: Tue May 17, 2016 11:28 am
by rkashyap
Thank you. I was able to remove the roles.

The command without the RoleId (to remove all the roles) errored out, so I had to list all the roles individually. Probably I had messed up the syntax.

Code: Select all

$ ./DirectoryCommand.sh -url=https://nam-sar-rata:9443 -user wasadmin -password XXXXXXX  -remove_group_roles '#DataStage Admins'
Error Invalid data was specified with the "remove_group_roles" option.

$ ./DirectoryCommand.sh -url=https://nam-sar-rata:9443 -user wasadmin -password XXXXXXX  -remove_group_roles '#DataStage Admins$CMAdmin~CMImporter~CMUser~DataStageAdmin~DataStageDeveloper~DataStageOperationsViewer~DataStageOperator~DataStageProductionManager ~DataStageSuperOperator~DataStageUser~EMAdmin~EMBusinessSteward~EMDataSteward ~EMStewardManager~ISDAdministrator~ISDConsumer~ISDDesigner~ ISDOperator~ISDProjectAdministrator~ISDUser~SuiteAdmin~SuiteUser'
------------------ Executing "remove_group_roles" command. ------------------
Roles being removed - Group Ids: "#DataStage Admins"         Role Ids: "CMAdmin~CMImporter~CMUser~DataStageAdmin~DataStageDeveloper ~DataStageOperationsViewer~DataStageOperator~DataStageProductionManager~DataStageSuperOperator~DataStageUser~EMAdmin~EMBusinessSteward ~EMDataSteward~EMStewardManager~ISDAdministrator~ISDConsumer~ISDDesigner~ISDOperator~ISDProjectAdministrator~ISDUser~SuiteAdmin~SuiteUser".
------------------------------------------------------------.
List of RoleIds/ Name is:

Code: Select all

Role ID                    Name
------------------------   --------------------------------------------
CMAdmin                    Common Metadata Administrator.
CMImporter                 Common Metadata Importer.
CMUser                     Common Metadata User.
DataStageAdmin             DataStage and QualityStage Administrator.
DataStageDeveloper         DataStage and QualityStage Developer.
DataStageOperationsViewer  DataStage and QualityStage Operations Viewer.
DataStageOperator          DataStage and QualityStage Operator.
DataStageProductionManager DataStage and QualityStage Production Manager.
DataStageSuperOperator     DataStage and QualityStage Super Operator.
DataStageUser              DataStage and QualityStage User.
EMAdmin                    Exception Management Administrator.
EMBusinessSteward          Exception Management Business Steward.
EMDataSteward              Exception Management Data Steward.
EMStewardManager           Exception Management Steward Manager.
ISDAdministrator           ISD Administrator.
ISDConsumer                ISD Consumer.
ISDDesigner                ISD Designer.
ISDOperator                ISD Operator.
ISDProjectAdministrator    ISD Project Administrator.
ISDUser                    ISD User.
SuiteAdmin                 Suite Administrator.
SuiteUser                  Suite User.