VMware Cloud Community
KKvss
Enthusiast
Enthusiast
Jump to solution

How to remove an orphaned object from permissions

Hello Community,

we deleted a Cluster and Host from the vCenter and didn´t remove some special permissions from that.

Now, we see an orphaned object in the Administrator --> Roles section and can´t remove it!

pastedImage_5.png

When I click on the objects there are no tabs to remove the permission - HTML5 is also not working.

pastedImage_9.png

Maybe somebody knows how to remove it?

Greetings

1 Solution

Accepted Solutions
KKvss
Enthusiast
Enthusiast
Jump to solution

Hey Team,

i found a solution together with my colleague - POWERCLI!!!

Get-VIPermission -Principal "User/Group name" | FL

EntityId      : Datacenter-datacenter-XXXX

Entity        : User/Group name

Role          : Role Name

Principal     : User/Group name

Propagate     : True

IsGroup       : True

    

There you can see the EntityID / Entity and Principal for the group also the orphand one will show up.

Get-VIPermission -Principal "User/Group name" | Remove-VIPermission

Perform operation?

Removing permission on entity 'Datacenter-datacenter-XXXX' for principal 'User/Group name' and role 'Role Name'

[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"):

So you can verify the EntityId and delete your orphaned one and ignore the rest.

View solution in original post

1 Reply
KKvss
Enthusiast
Enthusiast
Jump to solution

Hey Team,

i found a solution together with my colleague - POWERCLI!!!

Get-VIPermission -Principal "User/Group name" | FL

EntityId      : Datacenter-datacenter-XXXX

Entity        : User/Group name

Role          : Role Name

Principal     : User/Group name

Propagate     : True

IsGroup       : True

    

There you can see the EntityID / Entity and Principal for the group also the orphand one will show up.

Get-VIPermission -Principal "User/Group name" | Remove-VIPermission

Perform operation?

Removing permission on entity 'Datacenter-datacenter-XXXX' for principal 'User/Group name' and role 'Role Name'

[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "Y"):

So you can verify the EntityId and delete your orphaned one and ignore the rest.