Solved

Remove Oracle User but don't delete them from IFS

  • 9 January 2020
  • 5 replies
  • 764 views

Userlevel 3
Badge +10

We have a large number of users who have left the company and their IFS IDs are inactive.

At the Oracle database level they are also inactive and our DBA would like to remove them. 

Does anyone have experience with removing users from the Oracle data base but leaving them in IFS as inactive.  They do not own any schemas, events, triggers, batch jobs, etc.

icon

Best answer by Himasha Abeywickrama 9 January 2020, 20:46

View original

5 replies

Userlevel 7
Badge +18

Hi @dmanuele,

 

The recommended way is to delete the users using the ‘Delete Cascade’ RMB option on Users window which deletes both the Foundation 1 user and it’s associated oracle account and all database objects owned by the user.

 

But you can also delete the oracle account but keep the IFS account inactive by simply dropping the user and it will not do any harm as long as the account is inactive and they do not own any schemas, events, triggers, batch jobs, etc. You can use the following command to delete the user from the oracle database.

 

DROP USER <username>

 

Hope that helps!

 

 

Userlevel 3
Badge +10

Thank you Himasha.  This is exactly what I thought I could do but was looking for corroboration.

“ But you can also delete the oracle account but keep the IFS account inactive by simply dropping the user and it will not do any harm as long as the account is inactive and they do not own any schemas, events, triggers, batch jobs, etc. ...”

Userlevel 6
Badge +18

I would strongly recommend not deleting the accounts from Oracle once the users have used IFS for a period of time. 

Even though they may not own any database objects from a schema perspective, the IFS accounts that are tied to them (even though they are inactive) may be used throughout the system in terms of approvals, or document management aspects and deleting the underlying Oracle accounts may cause you issues in the long run.

Unless your DBA has some very unusual requirement, all they are probably looking to do it do some housekeeping, and putting your ERP system functionality at risk just for that reason is a risk I wouldn’t personally be willing to take.

Nick

Userlevel 7
Badge +18

I agree with @NickPorter here. It’s a great risk even if the users aren’t active anymore. We highly recommend the ‘Delete Cascade’ option. It may remove the relevant data or if it's not possible, will show an error. If an error is shown, you will need to remove the referenced data manually and then try to remove the user again

Userlevel 7
Badge +18

Inactive Oracle users can’t log in, and user reactivation can be audited at the database level. What other need would be addressed by removing them altogether?

As a side note, if you have ASFU licensing, I recommend keeping your active Oracle users in line with your active IFS users to ensure you’re not over- or under-utilizing your license count.

Reply