Package users and groups along with their permissions

[H_Malhotra]

Hi All,

I'm currently working on cleaning up inactive users and groups from our system. However, before I go ahead and delete these I want to create a backup. Just in case there are any issues later then I can revert to this package to restore everything.
I tried creating the backup using ACL Packager available as part of ACS commons and deployed that to my local in order to test it out. I used the "MergePreserve" option for Access Control Handling while deploying the package. However, I find a few properties missing here and there for all the user groups (attached screenshots).

Higher environment:

Local:

Would really appreciate any suggestions for creating a complete backup of the users, groups and all their permissions.

Thank you
Harshita Malhotra

[giuseppebag]

Hi @H_Malhotra, you can use ACL Packager to create packages that contain access control entries without copying the actual content. This user interface allows you to define and build packages that include access control entries for specific paths and/or specific principals.

[AmitVishwakarma · Accepted solution]

Hi @H_Malhotra ,

1. Use ACS AEM Commons - User and Group Packager

This ensures user nodes, group nodes, and their ACLs are all included.

  - Go to: /apps/acs-commons/content/packagers/usergroup-packager.html

  - Choose:

        - Include Users

        - Include Groups

        - Include ACLs

  - Use filters to define which users/groups (e.g., /home/users/<your-project> and /home/groups/<your-project>).

  - Click Create Package => Download and Save the ZIP.

2. Use ACL Packager for Path-Based ACLs

This ensures resource ACLs (like /content, /apps) are backed up too.

  - Go to: /apps/acs-commons/content/packagers/acl-packager.html

  - Create a new package with:

       - Path: /content, /apps, /etc, etc.

       - Select “All Principals”

       - Package Name: backup-acl-<env-date>

  - Click Create Package, then Build it.

  - Download and save the ZIP.

Important: Use Merge not MergePreserve

During deployment to another instance, use Access Control Handling = Merge.

MergePreserve keeps existing permissions and skips overwrites, which can cause missing ACLs (seen in your Local.png).

To Restore Completely

  - Upload and install the User/Group package

  - Upload and install the ACL package

  - Always select Access Control Handling = Merge

Regards,
Amit