From c1df5c7640f787aa8b42013be2e671653f90ae2c Mon Sep 17 00:00:00 2001 From: Peter Burkholder Date: Fri, 1 Dec 2023 15:44:07 -0500 Subject: [PATCH] Use cg-scripts instead of admin.fr for TOTP reset (#2445) --- _docs/ops/managing-users.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/_docs/ops/managing-users.md b/_docs/ops/managing-users.md index 2a31247e3..fab3ed578 100644 --- a/_docs/ops/managing-users.md +++ b/_docs/ops/managing-users.md @@ -36,7 +36,7 @@ If the user requesting a reset has any apps, routes, or services in their sandbo cf delete-service service ``` -2. Remove user's permissions to all [spaces and orgs](https://docs.cloudfoundry.org/adminguide/cli-user-management.html#orgs-spaces) other than their sandbox. Search for the user in the Admin interface to locate the relevant orgs and spaces. +2. Remove user's permissions to all [spaces and orgs](https://docs.cloudfoundry.org/adminguide/cli-user-management.html#orgs-spaces) other than their sandbox. Use the `cg-scripts/cf-get-user-roles.sh` and then `cg-scripts/strip-user-org-and-space-roles.sh` to find user roles and strip them away. For those spaces and orgs, notify the Space Managers and Org Managers that we've removed the user's access because of their request to reset their account's authentication application.