FortiSOAR Knowledge Base
FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
Andy_G
Staff
Staff
Article Id 194953

Description

 

Delete Users:

Administrators can delete FortiSOAR users using a script. 

 

Important.

It is highly recommended to use this script to delete or clean up users during the initial stages of setting up the FortiSOAR system.

If users who have been using FortiSOAR for a while are deleted, then the records for which the deleted user was the only owner, will also be lost forever.


Solution

 

To delete users, for FortiSOAR versions prior to 5.0.0, perform the following steps:

 

1) Log on to FortiSOAR and get the UUID of users from the Users Module. Ensure to keep a copy of the UUID of the user(s)  to delete.

 

nmathur_1-1661401823927.png

 

2) Copy the attached userDelete.sh.x script file to the FortiSOAR VM in the /home/csadmin folder.

 

3) Create an empty text file named usersToDelete.txt in the /home/csadmin folder of the FortiSOAR VM and enter or paste the UUID of the user(s)  to delete.


Warning: Name the text file usersToDelete.txt, otherwise the script will fail.

 

4) SSH to your FortiSOAR VM and log in as a root user and give the executable permission to the userDelete.sh.x script file using the following command:


chmod 0755 userDelete.sh.x

5) Execute the userDelete.sh.x script using the following command:


./userDelete.sh.x


Type y to confirm the deletion of the users.

From FortiSOAR 5.0.0 onwards, the usersToDelete.txt file and the userdelete script is present in the /opt/cyops/scripts/ folder in your FortiSOAR VM.

 

The procedure to delete users' post FortiSOAR release 5.0.0 is included in the 'Administration Guide'.

 

Applicable Version

Prior to FortiSOAR 5.0.0