topic Re: mgmt_cli - delete member from group ? in API / CLI Discussion

mgmt_cli - delete member from group ?

Marc_Lampo — Wed, 02 Aug 2017 13:03:40 GMT

at first glance, the R80 API documentatoin does not explain how to delete a member from a group. Anybody an idea ?

With dbedit, deleting an object, used in a group, implicitly removed the object from that group.

Trying to delete such an object, in R80.10, results in a warning I don't seem to be able to override.

So :

is there a way - via CLI - to remove a group member ?

or is there a way to delete an object with some "force" attribute in case it is used as member in some group ?

Thanks !

Marc

Re: mgmt_cli - delete member from group ?

PhoneBoy — Wed, 02 Aug 2017 15:19:57 GMT

I believe the correct approach is to use the "set group" command specifying all members of the group BUT the one you want to delete.

Having a proper "delete from group" API call seems like a good suggestion for future releases.

Re: mgmt_cli - delete member from group ?

Ofir_Shikolski — Wed, 02 Aug 2017 16:50:57 GMT

You can use where-used and delete all references .

I do not think that 'force' will be a good idea, you can create a scenario that you break the policy .

For groups, you can use 'remove'

groups Object v Collection of group identifiers.
or
Object vParameter name Value Description
remove string Removes from collection of values
or
List: string
 
or
string
or
List: string

Re: mgmt_cli - delete member from group ?

Marc_Lampo — Wed, 02 Aug 2017 17:31:33 GMT

I'll give it a try - but the first script I'm moving from R77.30 to R80 put 312 members in a group. If, on the next run, I have to delete one by entering the 311 that should remain ...

Re: mgmt_cli - delete member from group ?

PhoneBoy — Wed, 02 Aug 2017 18:25:56 GMT

Nice one... I didn't catch that the first time.

Re: mgmt_cli - delete member from group ?

Ofir_Shikolski — Wed, 02 Aug 2017 18:37:32 GMT

try this post

Adding members to a group

Eric provided example for 'batch' option , with one CSV file and a few moments you be able to complete the task

set group --batch <csvfilename> --format json --ignore-errors true

Re: mgmt_cli - delete member from group ?

Marc_Lampo — Wed, 02 Aug 2017 18:58:03 GMT

Thanks for your help !

Interestingly enough the on-line API documentation does not mention "remove" as possibility ...

And I already found that adding "ignore-warnings true" to the "mgmt_cli delete network ..." does the trick.

Re: mgmt_cli - delete member from group ?

Juan_Concepcion — Thu, 05 Sep 2019 20:30:04 GMT

To remove members from a group (not documented anywhere I could find - trial and error!!!) :

File format:

name,members.remove

group_name,host1

group_name,host2

group_name,host3

group_name,host4

group_name,host5

Format to run the batch file:

mgmt_cli -r true set group name group_name -b batch_file_name.txt

Re: mgmt_cli - delete member from group ?

Vince_Marinov — Tue, 16 Feb 2021 19:30:52 GMT

Hello,

I was looking into that conversation and I would like to ask if there was any solution provided in the new releases?

I am trying to figure out if there is a specific API call that can remove an object from a group.

Thanks,

Vince

Re: mgmt_cli - delete member from group ?

PhoneBoy — Tue, 16 Feb 2021 20:43:11 GMT

The above solution translates to the following API call: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-group~v1.7

Re: mgmt_cli - delete member from group ?

Juan_Concepcion — Tue, 16 Feb 2021 21:53:40 GMT

updating with single run and how to get it into batch format:

mgmt_cli -r true set group name <group_name> members.remove <object_name_to_be_removed>

>Batch remove members from group:

Header in txt file:

group_name, members.remove

mygroup, mymember1

mygroup, mymember2

mygroup, mymember3

CLI command to run: mgmt_cli -r true set group name group_name -b batch_file_name.txt

if you only do the set it will overwrite everything in group (i've done this before had to put back 350 objects into group)

--Juan