Skip to main content
iliessens
Visitor III
February 10, 2023
Solved

Delete user group in Fortimanager fails

  • February 10, 2023
  • 2 replies
  • 5009 views

Hi all,

 

I've been trying to delete an old user group in our Fortimanager install, but it won't work.

When deleting through "User & Authentication" > "User Groups", the object is in use by itself.

 

When going through CLI objects > User > Groups, I get the error:

"Response with errors. (-9001) used - object is copied to VDOM GW01.root"

 

During the last push, the group was correctly removed from the firewall. So it seems that is effectively not in use anymore.

 

Does anyone know how this group could be deleted?

 

Fortimanager 7.2.1 build1215

Fortigate 200F - v7.2.3

 

Best regards,

Imre

Best answer by gfleming

Can you create a CLI script to delete the user group in device manager and run it against your ADOM database?

2 replies

gfleming
Staff
gflemingAnswer
Staff
February 10, 2023

Can you create a CLI script to delete the user group in device manager and run it against your ADOM database?

iliessens
iliessensAuthor
Visitor III
February 13, 2023

Hi Graham,

 

I tried the script solution, and this was indeed able to remove the entries. Thank you!

 

For future reference, this was the script:

config user group 	delete OLD_group end

 

And instructions on how to add it are here:

https://docs.fortinet.com/document/fortimanager/7.2.1/administration-guide/990788/scripts

 

Best regards,

Imre