Remove Active Directory Group Assignments for Workspace ONE Access in NSX Manager for Identity and Access Management for VMware Cloud Foundation

To replace the Workspace ONE Access authentication provider with Active Directory over LDAP in NSX Manager, you must remove the existing Active Directory security group assignments before adding them again using the Active Directory over LDAP authentication provider.

UI Procedure

1. Log in to NSX Local Manager for the management domain at https://<management_domain_nsx_local_manager_fqdn>/login.jsp?local=true as admin.
2. On the main navigation bar, click System.

3. In the left pane, click Settings > User management.

4. Click on ellipsis for the Group or User group name and select Delete.

5. Repeat the procedure for each NSX Local Manager in each workload domain.

6. Repeat the procedure for the NSX Global Managers of the management domain and each workload domain.

PowerShell Procedure

1. Start PowerShell.

2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

   $sddcManagerFqdn = "sfo-m01-nsx01.sfo.rainpole.io"
   $sddcManagerUser = "[email protected]"
   $sddcManagerPass = "VMw@re1!" 
   
   $sddcDomainName = "sfo-m01"
   
   $nsxEnterpriseAdminGroup = "[email protected]"
   $nsxNetworkEngineerGroup = "[email protected]"
   $nsxAuditorGroup = "[email protected]"

3. Perform the configuration by running the command in the PowerShell console.

   Undo-NsxtVidmRole -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -principal $nsxEnterpriseAdminGroup
   
   Undo-NsxtVidmRole -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -principal $nsxNetworkEngineerGroup
   
   Undo-NsxtVidmRole -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -domain $sddcDomainName -principal $nsxAuditorGroup

4. Repeat the procedure for each NSX Local Manager in each workload domain.
5. Repeat the procedure for the NSX Global Managers of the management domain and each workload domain.