22.11. Removing users or groups as member managers from an IdM user group using the IdM CLI

Prerequisites

• You must be logged in as the administrator. For details, see Using kinit to log in to IdM manually.
• You must have the name of the existing member manager user or group you are removing and the name of the group they are managing.

Procedure

• Remove a user as a member manager of an IdM user group by using the ipa group-remove-member-manager command.

  For example, to remove the user test as a member manager of group_a:

  $ ipa group-remove-member-manager group_a --users=test
  Group name: group_a
  GID: 1133400009
  Membership managed by groups: group_admins
  ---------------------------
  Number of members removed 1
  ---------------------------

  User test can no longer manage members of group_a.

• Remove a group as a member manager of an IdM user group by using the ipa group-remove-member-manager command.

  For example, to remove the group group_admins as a member manager of group_a:

  $ ipa group-remove-member-manager group_a --groups=group_admins
  Group name: group_a
  GID: 1133400009
  ---------------------------
  Number of members removed 1
  ---------------------------

  Group group_admins can no longer manage members of group_a.

  注記

  After you remove a member manager from a user group, the update may take some time to spread to all clients in your Identity Management environment.

Verification

• Using the ipa group-show command to verify the user and group were removed as member managers.

  $ ipa group-show group_a
  Group name: group_a
  GID: 1133400009