[Docs] Add instructions how to remove Che user

[RomanNikitenko]

Summary

Update: Please see #17500 (comment)

My question is: is it possible to remove an user on Che?

My motivation is: I can not start any workspace due to incorrect namespace, please see relevant info section.
I tried to remove user using swagger. After removing user doesn't exist, but after refreshing a page or at next login the system has the same user with the same ID.

Please see my short demo:

Relevant information

I faced with the problem like described here: #17265 (comment)
So:

• Che's Keycloak shows the form with username, email, etc. when a user is trying to login into Che Dashboard the very first time
• autofill plugin sets the fields
• as result username can get incorrect value (with real names, including spaces or email for example)

Then user can not create a workspace due to not a valid namespace:
The workspace would be started in a namespace/project '<incorrect value here>', which is not a valid namespace/project name.

Please see #17265 (comment).

[sleshchenko]

cc @skabashnyuk @tolusha Any thoughts if it's possible to fully unregister the user by themselves? Seems keycloak user should be removed as well, but is it possible?

[skabashnyuk]

@sleshchenko I don't know. Probably keycloak admin can do that. Che-server API behaves correctly in this use-case as far as I can see.

[tolusha]

It is necessary to remove user in keycloak.

[tolusha]

@RomanNikitenko
Did I answer your question?

[RomanNikitenko]

@tolusha
I guess it's possible for admin role only.

So for my case for https://che-dogfooding.apps.che-dev.x6e0.p1.openshiftapps.com/ instance I can not remove myself from keycloak.

correct?

[tolusha]

yes, only admin can remove user from the keycloak.

[RomanNikitenko]

@skabashnyuk @tolusha @sleshchenko
thank you very much for your help and support!

Now it's clear for me, so I'm closing the issue

[l0rd]

@RomanNikitenko if it's not in documentation yet we should probably re-open this issue as a documentation issue. We need to add:

• a section about how to remove a user in the admin guide
• a link to Do not allow users to change username when logging for the first time #17265 in the known issues

[ibuziuk]

@l0rd there was a request from the Toolchain team to make the Delete API call GDPR compliant and cleanup resources not only on the db level, but also on keycloak - #17541
I believe we need to treat it as a high priority issue ^

[l0rd]

@ibuziuk priority now is documentation (let's include this issue into next sprint backlog) and then let's prioritize the API side (the issue you mentioned).

[skabashnyuk]

@ibuziuk is there anything left on this task?

[yhontyk]

Docs Jira issue https://issues.redhat.com/browse/RHDEVDOCS-2576

[themr0c]

Is the current doc here sufficient? https://www.eclipse.org/che/docs/che-7/administration-guide/removing-user-data/

[yhontyk]

@l0rd could you take a look if the current documentation covers the issue https://www.eclipse.org/che/docs/che-7/administration-guide/removing-user-data/ ? Can we close it?

[l0rd]

@boczkowska yes. Closing.