Internet2 is investigating a security incident involving a compromise to a confluence server that affected on April 10, 2019, which was successfully mitigated on April 12, 2019. If you did not receive an email from us, it’s unlikely that any of the content you submitted to the Internet2 Spaces Wiki needs to be re-entered. We apologize for any inconvenience this may have caused. Should you have any questions or require further assistance, please email
Child pages
  • Understanding Registry Deletion
Skip to end of metadata
Go to start of metadata

Deleting data from COmanage Registry turns out to be a surprisingly complicated issue. To start, it is first necessary to understand different types of delete operations.

  • Deactivation: A deactivated record is still visible, it is just no longer in effect. For example, setting a CO Person or CO Person Role to expired or suspended will leave the record in place, but it will be deprovisioned from downstream systems. A deactivated record can easily be reactivated.
  • Soft Delete: When a record is soft deleted, it is no longer visible. However, the physical record remains in the database, and the record can even be undeleted.
  • Hard Delete: When a record is hard deleted, it is no longer visible, and the physical record is also removed from the database. The only way to restore a record that has been hard deleted is from backups. (You are maintaining backups of your database, right?)

Deactivation is currently supported in various places through Registry. Adjust the relevant records status to SuspendedExpired, or another appropriate value and the record will be deactivated.

As of v0.9.4, many (but not all) Delete operations are now Soft Deletes. (No undelete is currently available; CO-1104.) These are largely around People attributes, but also those involving Enrollment Flows and Enrollment Attributes. Future planned changes will introduce more Soft Delete capabilities (CO-95), including for Groups and configurations.

Note that Expunge is a Soft Delete operation. Deleting a CO is a Hard Delete operation.

See also: Deleting Registry Records


  • No labels