Package users and groups along with their permissions | Community
Skip to main content
H
H_Malhotra
Level 2
May 29, 2025
Solved

Package users and groups along with their permissions

  • May 29, 2025
  • 2 replies
  • 418 views

Hi All,

I'm currently working on cleaning up inactive users and groups from our system. However, before I go ahead and delete these I want to create a backup. Just in case there are any issues later then I can revert to this package to restore everything.
I tried creating the backup using ACL Packager available as part of ACS commons and deployed that to my local in order to test it out. I used the "MergePreserve" option for Access Control Handling while deploying the package. However, I find a few properties missing here and there for all the user groups (attached screenshots).

Higher environment:

Local:


Would really appreciate any suggestions for creating a complete backup of the users, groups and all their permissions.

 

Thank you
Harshita Malhotra

 

 

    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
    Best answer by AmitVishwakarma

    Hi @h_malhotra ,

    1. Use ACS AEM Commons - User and Group Packager

    This ensures user nodes, group nodes, and their ACLs are all included.

      - Go to: /apps/acs-commons/content/packagers/usergroup-packager.html

      - Choose:

            - Include Users

            - Include Groups

            - Include ACLs

      - Use filters to define which users/groups (e.g., /home/users/<your-project> and /home/groups/<your-project>).

      - Click Create Package => Download and Save the ZIP.


    2. Use ACL Packager for Path-Based ACLs

    This ensures resource ACLs (like /content, /apps) are backed up too.

      - Go to: /apps/acs-commons/content/packagers/acl-packager.html

      - Create a new package with:

           - Path: /content, /apps, /etc, etc.

           - Select “All Principals”

           - Package Name: backup-acl-<env-date>

      - Click Create Package, then Build it.

      - Download and save the ZIP.

     

    Important: Use Merge not MergePreserve

    During deployment to another instance, use Access Control Handling = Merge.

    MergePreserve keeps existing permissions and skips overwrites, which can cause missing ACLs (seen in your Local.png).

     

    To Restore Completely

      - Upload and install the User/Group package

      - Upload and install the ACL package

      - Always select Access Control Handling = Merge


    Regards,
    Amit

    2 replies

    giuseppebaglio
    giuseppebaglio
    Level 10
    May 29, 2025

    Hi @H_Malhotra, you can use ACL Packager to create packages that contain access control entries without copying the actual content. This user interface allows you to define and build packages that include access control entries for specific paths and/or specific principals.

     
      AmitVishwakarma
      Community Advisor
      AmitVishwakarmaCommunity AdvisorAccepted solution
      Community Advisor
      May 29, 2025

      Hi @h_malhotra ,

      1. Use ACS AEM Commons - User and Group Packager

      This ensures user nodes, group nodes, and their ACLs are all included.

        - Go to: /apps/acs-commons/content/packagers/usergroup-packager.html

        - Choose:

              - Include Users

              - Include Groups

              - Include ACLs

        - Use filters to define which users/groups (e.g., /home/users/<your-project> and /home/groups/<your-project>).

        - Click Create Package => Download and Save the ZIP.


      2. Use ACL Packager for Path-Based ACLs

      This ensures resource ACLs (like /content, /apps) are backed up too.

        - Go to: /apps/acs-commons/content/packagers/acl-packager.html

        - Create a new package with:

             - Path: /content, /apps, /etc, etc.

             - Select “All Principals”

             - Package Name: backup-acl-<env-date>

        - Click Create Package, then Build it.

        - Download and save the ZIP.

       

      Important: Use Merge not MergePreserve

      During deployment to another instance, use Access Control Handling = Merge.

      MergePreserve keeps existing permissions and skips overwrites, which can cause missing ACLs (seen in your Local.png).

       

      To Restore Completely

        - Upload and install the User/Group package

        - Upload and install the ACL package

        - Always select Access Control Handling = Merge


      Regards,
      Amit

        Terms & ConditionsAccessibility statement

        Loading footer...