On this page

    Remove Duplicate Roles

    If you have found duplicate LDAP groups or local roles in Dremio, you can safely remove the duplicates using the admin utility.

    This topic provides usage information for the dremio-admin remove-duplicate-roles CLI command.

    note:

    The dremio-admin remove-duplicate-roles CLI command is available in Dremio 20.5.0+.

    Requirements

    • Perform a backup before running the command (see Backup for more information).

    • Shut down all cluster nodes completely before running the command (see Startup/Shutdown for more information).

    Syntax

    Syntax for remove-duplicate-roles command
    ./dremio-admin remove-duplicate-roles [args...]
    

    Options

    Options for remove-duplicate-roles command
    -r
    
    Perform a test run of the removal, providing a summary report of the roles that are duplicated and associated members, parents, ACLs, etc.
    

    Examples

    This section provides examples of using the dremio-admin remove-duplicate-roles CLI command.

    Remove Duplicate Roles: Test Run

    Remove duplicate roles test run command
    ./dremio-admin remove-duplicate-roles -r
    

    The test prints out the duplicates and related information such as associated members, parents, ACLs, etc. If the test run results are acceptable, you can run the command without the -r argument.

    Remove Duplicate Roles

    Remove duplicate roles command
    ./dremio-admin remove-duplicate-roles
    

    Running this command will remove duplicate roles as described in the test run. The command will consolidate all characteristics of the duplicated roles into a single retained role.