Remove Duplicate Roles
If you have found duplicate LDAP groups or local roles in Dremio, you can safely remove the duplicates using the admin utility.
This topic provides usage information for the dremio-admin remove-duplicate-roles CLI command.
note:
The dremio-admin remove-duplicate-roles CLI command is available in Dremio 20.5.0+.
Requirements
-
Perform a backup before running the command (see Backup for more information).
-
Shut down all cluster nodes completely before running the command (see Startup/Shutdown for more information).
Syntax
Syntax for remove-duplicate-roles command./dremio-admin remove-duplicate-roles [args...]
Options
Options for remove-duplicate-roles command-r
Perform a test run of the removal, providing a summary report of the roles that are duplicated and associated members, parents, ACLs, etc.
Examples
This section provides examples of using the dremio-admin remove-duplicate-roles CLI command.
Remove Duplicate Roles: Test Run
Remove duplicate roles test run command./dremio-admin remove-duplicate-roles -r
The test prints out the duplicates and related information such as associated members, parents, ACLs, etc. If the test run results are acceptable, you can run the command without the -r argument.
Remove Duplicate Roles
Remove duplicate roles command./dremio-admin remove-duplicate-roles
Running this command will remove duplicate roles as described in the test run. The command will consolidate all characteristics of the duplicated roles into a single retained role.