AMBA - How to remove an alias from a User Group ?

[OlivierTournant]

In our organization, we can add the same group to a user with different alias.

When using AMBA 8.3 (without any patch), the DUG command removes the Group Membership from the user, no matter the alias(es) assigned.

Is there any command enabling to target a specific alias for a group assigned to a user ?

Thanks all for your help.

PS : we will apply patch6 very shortly.

[_EricaChalfin]

Olivier Tournant‌,

I've moved your question to the RSA SecurID Access" data-type="space space where it will be seen by the product's support engineers, other customers and partners.  Please bookmark this page and use it when you have product-specific questions.

Alternatively, from the RSA Customer Support" data-type="space‌ page, click on Ask A Question on the blue navigation bar and choose Ask A Product Related Question.  From there, scroll to RSA SecurID Access" data-type="space and click Ask A Question.  That way your question will appear in the correct space.

Regards,

Erica

[EdwardDavis · Accepted solution]

I do not find any way to remove a specific alias (in AMBA login aliases are called GrpDefLogin) other than the heavy handed approach of: delete from group, CIF, and then add back to group.

Here I have a user pip, who has several aliases tied to the group pipaliasgrp, and the only way I've found to

remove any pip aliases (GrpDefLogin) is remove all of them.

[I could use more CIF commands to 'repair' and put back the aliases I wanted to keep, getting me my end result at the expense of a larger input file]

This will strip all aliases for user pip and group pipaliasgrp

action,deflogin,grpname
dug,pip,pipaliasgrp
cif,action,deflogin,grpname
aug,pip,pipaliasgrp

[OlivierTournant]

Thanks for your help Edward.

I've found a workaround within our database to select only the users who are assigned a group only once to be processed through AMBA.

It would be great if RSA could add optional fields in the DUG command with GrpDefLogin.

[_EricaChalfin]

Olivier Tournant‌,

A great suggestion to add to https://community.rsa.com/community/products/securid/ideas.

Regards,
Erica