On the Symantec Endpoint Detection and Response (EDR) appliance you are unable to select a SEPM group for a Recorder Group Exception or an Endpoint Search. The issue occurs if the SEPM group has one or more child groups, regardless if the child group(s) inherit from the parent group.
The SEPM API returns an unexpected error when querying for the list of SEPM groups.
EDR: 4.6.x
SEPM: 14.3 RU3 build 5427 - 14.3 RU4
The Broadcom engineering team is aware of this issue and is committed to resolving it in a future build. If a workaround is desired, please contact Broadcom Technical Support for assistance.