Notes on Using Delegated Administrator

Deleting Multiple Users

To mark multiple users for deletion, create an input file containing the users and run commadmin user delete with the -i option. For example:

commadmin user delete -D admin -n siroe.com -w &!2x%!a5 -d sesta.com -i deletedusers

where deletedusers is the input file listing the user entries marked for deletion. The following example shows the format of an input file:

l jsmith

l pdoe

l klee

where l is the required option that identifies user IDs, and jsmith, pdoe, and so on are the user IDs of the users to be deleted.

Deleting Mail and Calendar Services

You can delete the mail and/or calendar service only, without removing the user entry from the directory, by running commadmin user delete with either the -S mail or -S cal option.

Using the Delegated Administrator Console to Delete Users

You can also use the Delegated Administrator console to mark users for deletion:

1. In the console, navigate to the specified organization.

2. Click the Users tab (if it is not already displayed), select the users to be deleted, and click Delete.

The deleted users are removed from the console, and the users are marked for deletion in the LDAP directory.

However, you cannot use the console to remove a user entry from the directory. You must use the commadmin domain purge command to permanently remove the user entry.

Actions Performed by the Domain Purge Command

The commadmin domain purge command finds all user entries in the specified domain(s) where inetUserStatus is set to deleted. The utility then takes the following actions:

• If a user's mail and calendar services have been removed (that is, if the mailUserStatus and icsStatus attributes are set to removed), commadmin domain purge permanently removes the user entry from the directory.

• If either mailUserStatus or icsStatus for a user is not set to removed (for example, if one attribute is still set to deleted), commadmin domain purge does not purge the user entry.

• If one service attribute is set to removed but the other is not, commadmin domain purge purges the removed service, including all that service's attributes, from the user entry. It leaves the other service's attributes intact, and it leaves the user entry in the directory.

  These actions prevent a mailbox or calendar from being orphaned. The user's mailbox and calendar must be removed before commadmin domain purge will remove the user entry from the directory.