Deleting an Amazon Managed Microsoft AD user
Use the following procedure to delete an Amazon Managed Microsoft AD user with user and group management or Amazon Directory Service Data in either the Amazon Web Services Management Console, Amazon CLI, Amazon Tools for PowerShell.
Important
When you delete a user's account from a directory, all information about the user is removed, including any permissions the user has to access their account and applications.
Before you begin either procedure, you need to complete the following:
-
To use user and group management or Amazon Directory Service Data CLI, it must be enabled. For more information, see Enable user and group management or Directory Service Data.
-
You can only enable this feature from the Primary Amazon Web Services Region for your directory. For more information, see Primary vs additional Regions.
-
You'll need the necessary IAM permissions to use Amazon Directory Service Data. For more information, see Amazon Directory Service API permissions: Actions, resources, and conditions reference. To get started granting permissions to your users and workloads, you can use Amazon managed policies like AWSDirectoryServiceDataFullAccess or AWSDirectoryServiceDataReadOnlyAccess. For more information, see Security best practices in IAM.