Expand my Community achievements bar.

SOLVED

Difference between enabling/disabling and activating/deactivating a local user in AEM

Avatar

Level 1

When I go to Tools > Security > Users and select a user in AEM I see a list of actions that include Enable, Disable, Activate, and Deactivate but I don't know what these actions do

Screenshot 2022-06-29 at 11.44.07 AM.png

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

@aherbst Sometimes, you might find yourself wanting to disable a user account in Adobe Experience Manager, while leaving the account itself intact. This is easy to do via curl:

curl -vfs -u admin:admin http://localhost:4502/.rw.html -F “disableUser=Disabled via curl”

This sets a protected property on the user node, called rep:disabled – as the term “protected property” suggests, you aren’t supposed to directly interact with that property, but rather it should be set through the appropriate service.

 

To later re-enable this user, just pass a blank value:

curl -vfs -u admin:admin http://localhost:4502/.rw.html -F “disableUser=”

This will delete the protected property, and re-enable the user.

 

This can be done using the GUI as well

shaileshbassi_0-1656520642975.pngshaileshbassi_1-1656520842948.png

 

 

Thanks

View solution in original post

2 Replies

Avatar

Correct answer by
Community Advisor

@aherbst Sometimes, you might find yourself wanting to disable a user account in Adobe Experience Manager, while leaving the account itself intact. This is easy to do via curl:

curl -vfs -u admin:admin http://localhost:4502/.rw.html -F “disableUser=Disabled via curl”

This sets a protected property on the user node, called rep:disabled – as the term “protected property” suggests, you aren’t supposed to directly interact with that property, but rather it should be set through the appropriate service.

 

To later re-enable this user, just pass a blank value:

curl -vfs -u admin:admin http://localhost:4502/.rw.html -F “disableUser=”

This will delete the protected property, and re-enable the user.

 

This can be done using the GUI as well

shaileshbassi_0-1656520642975.pngshaileshbassi_1-1656520842948.png

 

 

Thanks

Avatar

Community Advisor

Hi @aherbst ,

  • Activating/Deactivating 
    On publisher instance , it is not advisable to create any users/groups.
    If any user needs to login to publisher instance, we need to create or activate the user from author instance.If you activated the user/group from author, you can see the green box for that user/group. This means you have activated properly to publisher .
    Hence, you can login to publisher instance with same user name and password which activated from author instance.

    Deactivating takes place in reverse manner - which will remove use/group from publisher instance.

    When you Activate below property is set to user/group node

    Screen Shot 2022-06-29 at 9.12.22 PM.png

    When you Deactivate below property is set to user/group node

    Screen Shot 2022-06-29 at 9.14.13 PM.png

  • Enable/Disable
    If you wish user/group to have it remain on repo but want to get off all the access right - in that case disable will come into the picture so that you can simply enable/modify later instead creating it from scratch.

    When you Disable below property is set to user/group node

    Screen Shot 2022-06-29 at 9.15.35 PM.png

Hope that helps!
Regards,
Santosh