When a portal user is auto-provisioned in Information Centric Analytics (ICA) 6.5.3, the privileges assigned to that user do not reflect the privileges of the portal role to which the user is assigned through its portal group association (and that association exists through the group to which the user is assigned in Active Directory).
Specifically, these privileges are assigned to an auto-provisioned portal user regardless of the privileges assigned to the user's role:
Can View PII
DIM Remediation Actions
Can View Action Plans
Can View in DLP (selected)
Release : 6.5.3
Component : Privileges
Beginning with version 6.5.4, when a portal user is auto-provisioned, no privileges are enabled by default for that user.