If you modify your LDAP user directory and group synchronization configuration or users/groups are removed from your external directory service, Spotfire will not remove any old users or groups from the database, but will instead only disable them in the database. This has the side affect that they are still visible in the Administration Manager and in the Users and Groups tool. In order to completely remove these from Spotfire, you must manually remove those groups with the following methods.

OPTION 1 (versions 6.5 and later).

 

Use the Spotfire Server config command "delete-disconnected-groups" to remove the obsolete groups. For example:

• C:\tibco\tss\6.5.0\tomcat\bin>config delete-disconnected-groups

Here are the details of the command from the Spotfire Server Installation and Configuration manual.
=========================
delete-disconnected-groups

SYNOPSIS
delete-disconnected-groups [-b value | --bootstrap-config=value] [-t value | --tool-password=value] [-f | --force]

OVERVIEW
Use this command to delete disconnected groups that have been previously synchronized from an LDAP directory from the User Directory.

OPTIONS
-b value
--bootstrap-config=value
Optional. The path to the bootstrap configuration file. See the bootstrap.xml help topic for more information about this file.

-t value
--tool-password=value
Optional. The configuration tool password used to decrypt the database password in the file bootstrap.xml. If the tool password is omitted, the command prompts the user for it in the console.

-f
--force
Optional. Indicates that the groups should be deleted without need for further confirmation.
=========================

 

 

OPTION 2 (all versions).

 

The "delete-disconnected-groups" config command was not introduced until version 6.5.0 and so the first option will not work for versions 6.0 and earlier. It is also possible to remove disconnected groups by executing a query on the Spotfire Server application database. Note that before you make any modifications to your database, confirm that you have made and validated a working backup. Before making any modifications in production environments, test all actions in test environments. To remove the disconnected groups from the database, you can execute the following query:

• DELETE from GROUPS where EXTERNAL_ID is not null and CONNECTED=0

How to remove disconnected synchronized groups from Spotfire.

Doc: delete-disconnected-groups

• https://docs.tibco.com/pub/spotfire_server/latest/doc/html/TIB_sfire_server_tsas_admin_help/server/topics/delete-disconnected-groups.html