Modification of Users and Group in Cross-domain

Products

• CA Identity Manager

Issue/Introduction

Unable to add a user to a different domain group in a Cross-domain, even though both the domains belong to the same forest.

Environment

CA Identity manager 14.3

Cause

User and group belong to a different domain, but both the domains belong to the same forest.

Here trying to add/remove Global AD group

Resolution

This is a Product limitation in the Cross-domain function. 

In the Cross-domain which belongs to the same forest, for group membership, the group should be a Universal group.

A Global group is not supported in this scenario