Remove Duplicate Roles
If you have found duplicate LDAP groups or local roles in Dremio, you can safely remove the duplicates using the admin utility.
This topic provides usage information for the dremio-admin remove-duplicate-roles
CLI command.
note:
The dremio-admin remove-duplicate-roles
CLI command is available in Dremio 20.5.0+.
Requirements
Perform a backup before running the command (see Backup for more information).
Shut down all cluster nodes completely before running the command (see Startup/Shutdown for more information).
Syntax
./dremio-admin remove-duplicate-roles [args...]
Options
-r
Perform a test run of the removal, providing a summary report of the roles that are duplicated and associated members, parents, ACLs, etc.
Examples
This section provides examples of using the dremio-admin remove-duplicate-roles
CLI command.
Remove Duplicate Roles: Test Run
./dremio-admin remove-duplicate-roles -r
The test prints out the duplicates and related information such as associated members, parents, ACLs, etc. If the test run results are acceptable, you can run the command without the -r
argument.
Remove Duplicate Roles
./dremio-admin remove-duplicate-roles
Running this command will remove duplicate roles as described in the test run. The command will consolidate all characteristics of the duplicated roles into a single retained role.