Removing User Data
Data protection laws and regulations, such as the General Data Protection Regulation (GDPR ) might require specific handling of user data, even after a user profile is removed. Additionally, employees or other clients with user accounts on API Portal may request that any user identifying information such as user name, email addresses, or client IP addresses be removed from API Portal. When a user is deleted in API Portal UMC, the audit events still retain the information about the user which should be deleted or anonymized. To comply with data protection requirements and user requests, in addition to deleting the user account, you have to complete activities to remove or anonymize data.
Anonymizing user data in UMC
As an Administrator after deleting a user or a user group, wait for thirty minutes so that the deleted audit is logged. Run the CLI command y-tenantmgmt to anonymize the user and group data.
Command Line support for anonymizing user and group data
1. Open command prompt and navigate to the location Install_directory\API_Portal\server\bin\work\apiportalbundle_s\tools\bin.
2. Run the following command for anonymizing user data:
y-tenantmgmt.bat -s http://hostname:port
-t tenant_name anonymize -u system -p ******* -n username -type user
3. Run the following command for anonymizing group data:
y-tenantmgmt.bat -s http://hostname:port
-t tenant_name anonymize -u system -p ******* -n groupname -type group
Anonymizing user data in ECP
As an Administrator after deleting a user in UMC, perform the following steps to anonymize user data in ECP.
1. Open API landing page, http://localhost/#default/home and login as an Administrator
2. Change the url to http://localhost/apidocs
3. In the ARIS API page, click ARIS Collaboration API link.
4. Click Persons and expand /persons/anonymize resource.
5. In the body parameter, provide the username in {"userNames": ["<user_name>"]} as value and click the Try it out! button.
You receive 202 as the response code for success.
The username is changed to Anonymized User1 in all applicable places in ECP.