how to delete rules which created by other user by local Admin account

[pmodcnrma]

I have multiple users in the local Administrator role, who have created rules,dashboards and reports ,after deleting users from RSA SA GUI , but unable to delete their made rules due to it being linked to existing users.

due to i am unable to delete unwanted dashboards,rules or even reports.

Problem facing in RSA netwitness 10.6.6.0

@nwadmin @Anonymous 

@NandakumarVadiv @VijayabaskarBal @AaqibShakeel 

[JohnKisner]

pmodcnrma,

Please note that 10.6.6.0 is no longer a valid or supported version of NetWitness. https://community.netwitness.com/t5/product-life-cycle/tkb-p/product-life-cycle

When it comes to deleting the items you are looking to delete in these older versions of NetWitness you have to manually disconnect all users from these items before you can delete them. This is one of the items that was better addressed in later versions of NetWitness. To disconnect these users in 10.6.x you have to manually get into backend databases to remove all these other users attachments. This is primarily for dashboards. I assume you can't remove reports because they are used in dashlets on dashboards that are setup for users. Once the reports aren't attached to anything then you can delete them. Unfortuantely you can't delete any of the rules until the report they are attached to is deleted. 

One of the issues that use to be in 10.6.x is that an admin can create reports and rules that they only had access to. It doesn't by default set access to allow admins to get into them. The person needs to manually set the admin group to have permissions. Later versions of NetWitness actually have fixes in it to allow existing admins to gain access to these orphaned items. 

Your best bet is to upgrade to a more recent version of NetWitness as Support can't provide any further assistance around these older end of life versions.