Safeguard Reference Manual (G06.24+, H06.03+ )

User Security Commands
Safeguard Reference Manual—520618-013
5-23
DELETE USER Command
user-spec
specifies the user or users to be deleted from the system. user-spec can be any
of:
group-num , member-num
group-name.member-name
group-num , *
*,*
group-name and member-name can contain wild-card characters.
WHERE expression
causes the DELETE command to apply to only authentication records for users
who belong to the groups specified by expression. For a description of WHERE
expression, see the ALTER USER Command on page 5-10.
Considerations
•
Deleting a user authentication record owner
If the primary owner of a user’s authentication record is deleted, only the
secondary record owners, the group manager of the primary owner, or the local
super ID can change the user’s authentication record.
•
Effect of the DELETE USER command on access lists
Deleting a user does not delete that user ID from any access control lists for
objects protected by the Safeguard software. When a user is deleted, every object
owner must remove all access-list entries that grant the deleted user access to
protected objects.
•
Effect of the DELETE USER command on file-sharing group lists
Deleting a user causes that user ID to be deleted from all file-sharing group lists.
•
Effect of aliases on deleting a user authentication record
A user authentication record cannot be deleted if any user aliases are associated
with the user ID. The alias authentication records must be deleted before the user
authentication record can be deleted.
•
Deleting the last user also deletes the group
If you delete a user who is the only member of that administrative group, the group
is deleted automatically if the group’s AUTO-DELETE attribute is ON. The group
name and group number then become available for use in defining a new group. If
the group’s AUTO-DELETE attribute is OFF, you can delete the group only with the
DELETE GROUP command. (For more information, see INFO GROUP Command
on page 7-10.)