dump all roles in the system

while troubleshooting i have noticed that Security created bunch of empty roles.. i can go to RM and delete one by one, but it's take forever. so i want to dump all the roles in the system irrespective of the profile and delete the empty ones by creating for loop and run lsdelete for the roles since i am not expert at creating the xml file for loadusers and that still need profile id.

is there a way we can dump all the roles in the system without giving profile name to the command?

Find more posts tagged with

Infor Lawson Technology Group - Discussion

Comments

unknown

I don't see anything in the "Lawson Administration: Resources and Security" document that will let you do that. I think the only option is to write a script to connect to your LDAP and output all the roles.

unknown

thanks Jonathan..

we can do that.. but it simply deletes the role (i think) without checking the any objects assigned to role and which may end-up in corrupt data at ADAM. like i can connect to ADAM using JXplorer as instance owner and delete the roles but there is no checking involved.

example: if we use lsdelete or through RM Tool, system will check whether any security classes assigned to roles.

Derick Safarian

If you just want a list of roles, you can run the Role-SecurityClass report from reporting console in Lawson Security. You can run this as .csv, then use MS Excel to "remove duplicates" which will then give you a list of all roles.

unknown

I don't believe there is any "Lawson supported" way to do what you want. You could write a Perl script to query LDAP, look for all the security roles, check each role to see if it has security classes assigned to it, and then, if it does not, run your 'lsdelete' command on the role. It's pretty easy to query LDAP with Perl. I can give you an example if you would like. This is of course not supported by Lawson so support won't help you if you break something.

0912140849182145.pdf

unknown

thanks Derick, i tried that option and i need select one by one and we have more than 300 roles as of today.. it is hard to go one by one when selecting.

0712050809193544.doc

unknown

thanks Jonathan.. yes, i would like to see the example.. can you please email me to madhu.muppaneni@sdhc.k12.fl.us

d-hofmann

Isn't there a security report that dumps all the roles assigned to a specific user?

You would just need to add 50 roles to that user, dump them.

Remove those 50 and add them.

Run the report again.

I won't get you everything in a single report, but it should get you down to fewer reports.

You may be able to assign more than 50, but I do seem to recall there is a limit on the number of roles you can assign to one user.

Copyright © 2025 Infor. All rights reserved.