On 12/31/20 12:32 PM, Ivan Isakov via FreeIPA-users wrote:
Hello,
When I try to perform command after command kinit admin:
ipa group-remove-member group --users=test
I get next:
Failed members:
member user: test: Insufficient access: Insufficient 'write' privilege
to the 'member' attribute of entry...
How can I fix it?
Hi,
with which credentials are you performing the operation? Before running
ipa group-remove-member, you had to run "kinit <someuser>", and this
<someuser> probably doesn't have the permission to edit groups.
The user needs to have the role "User Administrator", which can be
granted directly or through the "administrators" membership:
- grant "User Administrator" role to <someuser>
kinit admin
ipa role-add-member "User Administrator" --users <someuser>
kdestroy -A
kinit <someuser>
ipa group-remove-member group --users=test
-or make <someuser> an administrator:
kinit admin
ipa group-add-member admins --users <someuser>
kdestroy -A
kinit <someuser>
ipa group-remove-member group --users=test
HTH,
flo
Help, please!
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
