Unable to see individual users on the User Groups page on DLP Enforce console

Products

• Data Loss Prevention

Issue/Introduction

You see the security group; However, you are unable to expand and see the individual users in the security Group seen on the DLP enforce GUI under Manage > User Groups > Directory

Cause

Security group created on the AD is the scope type 'global'. Active Directory Security Groups need to be Universal, not Global scope for DLP to be able to pull the details through LDAP query.

Resolution

Change the security group from 'global' to 'universal' on the AD.