Delete users automatically?

[LP_user]

Hi,

Is it possilbe to delete the user in TM1 automatically? For example, if one user is not active for 1 year, he/she will be deleted from TM1 automatically. How to do it? I delete users manually at the moment.

With best regards,

LP_user

[lotsaram]

Yes, and no. We created an application to do this that looks at log files and keeps track of the last login or logout timestamp per user. User hasn't logged in for x days then all group memberships are removed, no additional login attempt for further x days and the user is deleted entirely. Not overly complicated to do but you do have to build it, it is not provided "out of the box."

[LP_user]

Hi lotsaram,

Thanks for your reply. How is the application created for managing users? It looks cool. What language do you use?

Regards

LP_user

Yes, and no. We created an application to do this that looks at log files and keeps track of the last login or logout timestamp per user. User hasn't logged in for x days then all group memberships are removed, no additional login attempt for further x days and the user is deleted entirely. Not overly complicated to do but you do have to build it, it is not provided "out of the box."

[MSidat]

Hi LP_User

I am presuming Lotsaram's approach was done by a combination of TI's and possibly some Batch Scripts.

You could easily create a TI that runs periodically which looks at the PasswordLastTimeUpdated field in the }ClientProperties cube alongside the PasswordExpirationDays field.

So if someones password was last updated 90 days ago and your passwordexpirationdays is set to 30. You can safely assume they have not tried to log in for at least 60 days and hence tag them for removal.

Hope it helps.

[LP_user]

Hi MSidat,

Thanks for your tip. Could you please give me one example how to use TI process to remove one user?

Best

Hi LP_User

I am presuming Lotsaram's approach was done by a combination of TI's and possibly some Batch Scripts.

You could easily create a TI that runs periodically which looks at the PasswordLastTimeUpdated field in the }ClientProperties cube alongside the PasswordExpirationDays field.

So if someones password was last updated 90 days ago and your passwordexpirationdays is set to 30. You can safely assume they have not tried to log in for at least 60 days and hence tag them for removal.

Hope it helps.

[declanr]

Hi MSidat,

Thanks for your tip. Could you please give me one example how to use TI process to remove one user?

Best

Hi LP_User

I am presuming Lotsaram's approach was done by a combination of TI's and possibly some Batch Scripts.

You could easily create a TI that runs periodically which looks at the PasswordLastTimeUpdated field in the }ClientProperties cube alongside the PasswordExpirationDays field.

So if someones password was last updated 90 days ago and your passwordexpirationdays is set to 30. You can safely assume they have not tried to log in for at least 60 days and hence tag them for removal.

Hope it helps.

DeleteClient(ClientName);