Overview

Deleting RACF users and groups is generally not as straightforward as simply deleting a profile because other profiles in the RACF database may refer to the user or group. For example:

Dataset profiles may exist that have the user ID (UID) or group ID (GID) as their high level qualifier.
The group or user may be the owner of other profiles (for example, user profiles, group profiles, or resource profiles).
The user or group may be authorized to access resources, and therefore appear in the resources’ access lists.
The group may still have subgroups or users connected to it.

Some of the above conditions prevent the deletion of a user or group. Others do not prevent the deletion, but leave the RACF database with redundant information after the user or group is deleted.

RACF cross-reference utility IRRUT100 can be used to find all occurrences of a UID or GID in the RACF database. This utility, however, does not delete the user ID or group ID occurrences from the database.

Feedback is provided as an informational resource only and does not form part of SailPoint's official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.


	You are here:

Overview

Documentation Feedback