Mauricio Tavares via FreeIPA-users wrote:
https://freeipa.readthedocs.io/en/latest/api/role_del.html only lists the cn as argument. Shouldn't it also contain the name of the role we want to go away?
The cn is the name of the role.
dn: cn=User Administrator,cn=roles,cn=accounts,dc=example,dc=test cn: User Administrator description: Responsible for creating Users and Groups memberof: cn=User Administrators,cn=privileges,cn=pbac,dc=example,dc=test ...
rob