IBM Security MaaS360

 View Only
Expand all | Collapse all

Permanently Delete A USER from MaaS360

  • 1.  Permanently Delete A USER from MaaS360

    Posted Mon October 09, 2023 01:26 PM

    Greetings All,

    I am hoping the community can shed some light on an issue that I am having and bring clarity to a nagging question I have.

    1. How do you remove a user permanently from MaaS360
    2. When the user is added to Maas360 what password should I used when it prompts for the user's credentials.  Is it the domain password or the MaaS360 Admin Password?


    ------------------------------
    Wilford Morrison
    ------------------------------


  • 2.  RE: Permanently Delete A USER from MaaS360

    Posted Tue October 10, 2023 04:51 AM
    Hi Wilson
     
    Responses inline below. 
     
    How do you remove a user permanently from MaaS360
     
    - If your users are local you can delete them depending on your User deletion settings.  Please go to Setup / Settings / User Deactivation settings. 
    In addition if your users are directory users they would need to be disabled first on the directory so that we can delete them locally - if they are not disabled our Read-only directory integration (Cloud Extender OnPrem AD, LDAP, Azure AD) will continue to synch the user record.
    Also please have a look at this document which tells you how to delete once the above steps have been taken: https://www.ibm.com/docs/en/maas360?topic=users-deleting-in-bulk-from-maas360-portal
    2. When the user is added to Maas360 what password should I used when it prompts for the user's credentials.  Is it the domain password or the MaaS360 Admin Password?
    - Not clear - you mention users and admins here.  If users then it depends on whether the user is local or directory user. 
    In a similar way for Admins it depends on whether you set it up to use the local or directory credentials. 
    If you're not sure which is set please go to: 
    (For Users) Setup / Settings / Directory and Enrollment / Directory and Authentication. In here you have User Authentication Setup and it tells you which is the default meaning which system the enrollment (for example) will use as standard unless otherwise indicated (you can indicate authentication type on Advanced tab of Enrollment settings)

    (For Admins) Setup / Settings / Administrator Settings / Advanced - note you can set additional strong authentication settings here, but the type of authentication expected is specific to each admin account and can be found in the Setup / Administrators page. 

    Hope this helps!

    Best



    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------

    Original Message


  • 3.  RE: Permanently Delete A USER from MaaS360

    IBM Champion
    Posted Tue October 10, 2023 09:26 AM

    Good morning Wilford

    There are few steps to removing a user from MaaS360.

    • First go to the device record of any device enrolled for that user and either push a full wipe command or remove control for the specific device.  This will depend on whether you want to remove everything on the device or simply remove the enrollment, apps and email configuration if so configured. 
    • Next you will need to go into "users", find the user and "deactivate' the account. 
    • Doing these steps will completely remove all records etc. 
    • If for some reason you wish to keep the device records you can "hide" the device by click hide in the drop down in the device enrollment record. 

     

    As far as prompting for a password you will need to be a bit clearer as to when that is happening.  Here are some level points that might help.  Keep in mind every configuration is different and may require more steps. 

    • IF this is related to authenticating the user enrollment and you are authenticating against active directory you will use the users email login credentials.
    • If you are doing a local enrollment you will need to generate a local enrollment which will create a onetime passcode for the enrollment process. 
    • If you have configured ActiveSync as part of the enrollment process and need to build the Exchange account you will need the user's email credentials.

     

    Feel free to reach out to me if you would like to chat. 

     

    Thanks,

     

    Mitch Lauer

    Sr. Management Consultant

    connecTel  Wireless              

    216-970-6981 | Cell-US           416-801-3127 | Cell-Canada  

    412-339-5775 | Help Desk     412-339-5765 | Direct Dial

     




    Original Message