secons -dbclean Remove XUSER Objects from the CA Privileged Access Manager Server Control Database

The secons utility removes XUSER objects that were not resolved to their native security identifiers (SID) from the  database. Use the secons -dbclean command to remove XUSER objects that no longer exist in the native environment.
capamsc141
The secons utility removes XUSER objects that were not resolved to their native security identifiers (SID) from the 
Privileged Access Manager
database. Use the secons -dbclean command to remove XUSER objects that no longer exist in the native environment.
This command has the following format:
secons -dbclean <osuser>
  • -dbclean
    Specify to remove all XUSER objects that were not resolved from the 
    Privileged Access Manager
    database.
  • <osuser>
    Specifies the native user account name.