TN - 1490 Deleting OS Users from the ID

AVEVA Application Server 2023R2 SP1 and higher allows authentication with OS User or OS Group based security.  Users are logged into the galaxy database when they first connect or login to the system.  This article provides the steps to delete users or domains that no longer exist in Active Directory from the galaxy database.

The following example is for the OS Group Authentication mode.  There is a domain that no longer exists.  It has been replaced by a new domain.  

The old domain groups are listed in red.  The new domain groups are listed in black.  The red groups need to be deleted from the Roles tab.

The Users tab lists the old and new domain users.  The old users need to be deleted to cleanup the galaxy database.

The system does not allow the groups or users to be deleted with OS User or OS Group Authentication enabled.

Note:  Create a full backup of the galaxy database from the Operations Control Management Console (OCMC) before continuing to the next step.

Note:  Check to be sure that you know the password for the Galaxy Administrator.

Next, switch the Authentication mode to Galaxy.

You will be prompted to log back in with the Administrator login.

Delete the groups and users that no longer exist from the Roles and Users tab.  You will be allowed to cleanup old users and groups.

Lastly, switch the Authentication mode back to OS User or OS Group Security.

Check the permissions granted to each OS group after it is switched back.