cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

557
Views
5
Helpful
4
Replies
Enthusiast

ISE 1.2: Remove unused Sponsor Group and Identity Group

Hi

I started with ISE 1.1.2 and now upgrade to 1.2.

There are 1. Sponsor Groups and 2. Identity Groups which are no more in use, but I am not able to remove them anymore.

1. One is a special Sponsor group which sponsor group policy I already removed. The I go to Aministration>Web Portal Management>Sponsor Groups and select the appropriate Group ans click delete and ok to confirm, the following error is displayed:

com.cisco.cpm.nsf.api.exceptions.NSFEntityDeleteFailed: java.rmi.RemoteException: Failed to execute the Query : DELETE_USERONAPP ORA-02292: integrity constraint (CEPM.EDF_GST_SPGRPID_SUB) violated - child record found ; nested exception is: java.sql.SQLIntegrityConstraintViolationException: ORA-02292: integrity constraint (CEPM.EDF_GST_SPGRPID_SUB) violated - child record found

 

2. The same happens with one Identity Group. I do not have it active anymore. Not in authentication, and not in authorization policy. I go to Administration>Identity Management>Groups>  and select te group to remove, and click "Delete selected" and confirm with ok, the following error occured:

Cannot delete selected Identity Group(s) because there are resources which are mapped to these or its child identity group(s)

 

 

Is there any reason for any of these issue?

Many thanks

 

 

    Everyone's tags (3)
    4 REPLIES 4
    Enthusiast

    please remove the rules or

    please remove the rules or authentication and authorization profiles (which is being used with  sponsor and AD group) before removing the groups. Then only you can delete the groups.

    Enthusiast

    Unfortunatly I have remove

    Unfortunatly I have remove all dependencies, but still did not have any success.

    Highlighted
    Cisco Employee

    Hi , Please open service

    Hi ,

     

    Please open service request with cisco. These kind of issues may happen when the dependencies are deleted from UI but there is a chance that some of the dependencies may not be deleted completely and are not visible from UI as well.  These kind of issues can be resolved under cisco guidance.

     

    Thanks,

    Naresh

    Rising star

    I would request you to open a

    I would request you to open a TAC case at tac@cisco.com