Delete a Group

When you delete a group, you permanently delete the group and all of its children (sub-groups) from the user/group store, and you will have to recreate all of the affected groups if you want to use them again. If you delete a group, it does not delete the users contained within it.

If the group was explicitly listed in a delegated administration or visitor entitlement role, you must also remove that group from the role definition(s).

You can remove the subgroup from a group, and you can move a group within the group hierarchy to change its relationship to other groups. You can delete groups by two methods:

Note: If you are using an external authentication provider to store users and groups (one that is not the default LDAP provider built in to WebLogic Server), and you want to delete a group from that provider, the provider may be configured to prevent group deletion from an outside tool such as the WebLogic Administration Portal. To see whether or not the external authentication provider you are using supports group deletion, see View Security Provider Properties. If the Group Remover field for the authentication provider shows "No," you cannot delete a group for that provider with the WebLogic Administration Portal. You must delete the group directly in that provider.

Method 1:

  1. In the Users & Groups tool, select an authentication provider from the "Browse User-Groups from" field.
  2. In the Users & Groups resource tree, select the group you want to delete. (If you do not see a list of groups, see the Notes below.)
  3. Right click, and select Delete this Group. (Or click Delete this Group in the toolbar.)
  4. Click OK.
  5. If the group was explicitly listed in a Delegated Administration or Visitor Entitlement role, remove that group from the role definition(s) on the Delegated Administration and/or Visitor Entitlement pages.

Notes: If a list of groups is not displayed, make sure you have built a group hierarchy tree for the authentication provider. If after that you still do not see a list of groups, the authentication provider probably does not allow read access (see View Security Provider Properties to find out). However, you can activate a text field for group name entry for authentication providers that do not allow read access.

If you are using an RDBMS authentication provider, be aware of case sensitivity when looking up groups. For example, group "Managers" is different than group "managers.

Related Help Topics: