Deleting extended attributes from an ACL policy with pdadmin

We can delete extended attributes from an ACL policy in the domain with the pdadmin utility.

Steps

  1. Log on to the domain as the domain administrator.
  2. Use the acl modify command with the delete attribute option.

Example

For example, to delete the extended attributed named Dept_No from the ACL named Test-ACL:
pdadmin sec_master> acl modify Test-ACL delete attribute Dept_No

See the IBM Security Verify Access for Web: Command Reference.

Parent topic: Delete extended attributes from an ACL policy