Your achievements

Level 1

0% to

Level 2

Tip /
Sign in

Sign in to Community

to gain points, level up, and earn exciting badges like the new
Bedrock Mission!

Learn more

View all

Sign in to view all badges

Adobe Summit 2023 [19th to 23rd March, Las Vegas and Virtual] | Complete AEM Session & Lab list
SOLVED

Difference between enabling/disabling and activating/deactivating a local user in AEM

Avatar

Level 1

When I go to Tools > Security > Users and select a user in AEM I see a list of actions that include Enable, Disable, Activate, and Deactivate but I don't know what these actions do

Screenshot 2022-06-29 at 11.44.07 AM.png

1 Accepted Solution

Avatar

Correct answer by
Community Advisor

@aherbst Sometimes, you might find yourself wanting to disable a user account in Adobe Experience Manager, while leaving the account itself intact. This is easy to do via curl:

curl -vfs -u admin:admin http://localhost:4502/.rw.html -F “disableUser=Disabled via curl”

This sets a protected property on the user node, called rep:disabled – as the term “protected property” suggests, you aren’t supposed to directly interact with that property, but rather it should be set through the appropriate service.

 

To later re-enable this user, just pass a blank value:

curl -vfs -u admin:admin http://localhost:4502/.rw.html -F “disableUser=”

This will delete the protected property, and re-enable the user.

 

This can be done using the GUI as well

shaileshbassi_0-1656520642975.pngshaileshbassi_1-1656520842948.png

 

 

Thanks

2 Replies

Avatar

Correct answer by
Community Advisor

@aherbst Sometimes, you might find yourself wanting to disable a user account in Adobe Experience Manager, while leaving the account itself intact. This is easy to do via curl:

curl -vfs -u admin:admin http://localhost:4502/.rw.html -F “disableUser=Disabled via curl”

This sets a protected property on the user node, called rep:disabled – as the term “protected property” suggests, you aren’t supposed to directly interact with that property, but rather it should be set through the appropriate service.

 

To later re-enable this user, just pass a blank value:

curl -vfs -u admin:admin http://localhost:4502/.rw.html -F “disableUser=”

This will delete the protected property, and re-enable the user.

 

This can be done using the GUI as well

shaileshbassi_0-1656520642975.pngshaileshbassi_1-1656520842948.png

 

 

Thanks

Avatar

Community Advisor

Hi @aherbst ,

  • Activating/Deactivating 
    On publisher instance , it is not advisable to create any users/groups.
    If any user needs to login to publisher instance, we need to create or activate the user from author instance.If you activated the user/group from author, you can see the green box for that user/group. This means you have activated properly to publisher .
    Hence, you can login to publisher instance with same user name and password which activated from author instance.

    Deactivating takes place in reverse manner - which will remove use/group from publisher instance.

    When you Activate below property is set to user/group node

    Screen Shot 2022-06-29 at 9.12.22 PM.png

    When you Deactivate below property is set to user/group node

    Screen Shot 2022-06-29 at 9.14.13 PM.png

  • Enable/Disable
    If you wish user/group to have it remain on repo but want to get off all the access right - in that case disable will come into the picture so that you can simply enable/modify later instead creating it from scratch.

    When you Disable below property is set to user/group node

    Screen Shot 2022-06-29 at 9.15.35 PM.png

Hope that helps!
Regards,
Santosh