System Domain groups fail to Sync on Aria Automation if the group name is a substring of the name of another group

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Aria Automation fails to list/Sync some/all users and groups, mapped to a project, in Day 2 tasks/ onboarding events.

Environment

Aria Automation 8.x. 

Cause

In the scenario of display names of the one or more groups being substrings of the name of other groups, Then, As the group & user sync is run in the backend, the search for the group via inbuilt "Search APIs" follows to use the 'Display name' as the search term instead of using a rather unique search term. As a result the list returned may consist of multiple groups with no consistent/definite order. the project-service selection code only picks the first group in the list, which may not necessarily be the targeted group. Thus leaving the required group un-synced to the project. 

connect to the Aria Automation DB on the master node:

> vracli dev psql provisioning-db
> yes // to confirm connection
> select * from cgroup where display_name like 'smallest-group-display-name%' limit 10; // if there are multiple groups, review the order in which the groups are returned in the next query when queried in the project_principals table.
> select * from project_principals where principal_id like 'vAA-%' limit 10; // To view the project's mapping to the groups

Resolution

VMware is aware of this issue and is actively investigating on potentials modifications required to address this issue. However, there currently is no fix. Addressing the problem requires direct database manipulation. Please reach out to technical support and reference Knowledge Article ID (369817) in your case description.For more information, see How to Submit a Support Request