macOS Delete/Disable Users Script

#!/bin/bash

# This resource is provided as a convenience for Level users. We cannot 
# guarantee it will work in all environments. Please test before deploying 
# to your production environment. We welcome contributions to our community 
# library

# Define the users to remove
USERS_TO_REMOVE="{{UsersToDelete}}"

# Convert the comma-separated list into an array
IFS=',' read -r -a userArray <<< "$(echo "$USERS_TO_REMOVE" | sed 's/, */,/g')"

for user in "${userArray[@]}"; do
    # Trim spaces from the username
    user=$(echo "$user" | xargs)

    # Check if user exists
    if id "$user" &>/dev/null; then
        echo "Processing user: $user"

        # Check if the user is in the admin group and remove from it
        if dscl . -read /Groups/admin GroupMembership 2>/dev/null | grep -q "\b$user\b"; then
            echo "Removing $user from the admin group..."
            sudo dseditgroup -o edit -d "$user" -t user admin && echo "$user removed from the admin group."
        fi

        # Get user's UUID
        UUID=$(dscl . -read "/Users/$user" GeneratedUID 2>/dev/null | awk '{print $2}')
        
        # Remove UUID from admin group if it exists
        if [[ -n "$UUID" ]]; then
            echo "Removing UUID $UUID from admin group..."
            sudo dscl . -delete /Groups/admin GroupMembers "$UUID" && echo "Removed UUID: $UUID from admin group."
        fi

        # Delete the user account
        echo "Deleting user $user..."
        sudo dscl . -delete "/Users/$user" && echo "Deleted user $user."

    else
        echo "User $user does not exist. Skipping..."
    fi
done