Delete user group in Fortimanager fails

[iliessens]

Hi all,

I've been trying to delete an old user group in our Fortimanager install, but it won't work.

When deleting through "User & Authentication" > "User Groups", the object is in use by itself.

When going through CLI objects > User > Groups, I get the error:

"Response with errors. (-9001) used - object is copied to VDOM GW01.root"

During the last push, the group was correctly removed from the firewall. So it seems that is effectively not in use anymore.

Does anyone know how this group could be deleted?

Fortimanager 7.2.1 build1215

Fortigate 200F - v7.2.3

Best regards,

Imre

[gfleming · Accepted solution]

Can you create a CLI script to delete the user group in device manager and run it against your ADOM database?

[iliessens]

Hi Graham,

I tried the script solution, and this was indeed able to remove the entries. Thank you!

For future reference, this was the script:

config user group
	delete OLD_group
end

And instructions on how to add it are here:

https://docs.fortinet.com/document/fortimanager/7.2.1/administration-guide/990788/scripts

Best regards,

Imre