Group permissions are not recognized by VCF Automation
Article ID: 426295
Updated On:
Products
Issue/Introduction
Access roles for groups assigned are not recognized and updated for Users under the group.
Environment
VCF 9.0.x
VCF Automation 9.0.x
VCF Identity Broker 9.0.x
Cause
Groups are not being discovered after configuration. Found an issue with groups being case sensitive.
Resolution
The AD groups are case sensitive. Depending on configuration, the added access role group should be specified as the following:
ADGroup@example.com if using LDAP with UPN.
1. Open the VCF Automation portal as a local user Admin.
2. Go to Administer->Access Control>Groups to add a user group permissions.
3. Enter the AD group matching the Case sensitive groups within AD. Example: Administrators@example.com. Multiple Groups can be entered per line.
4. Select the Assign Role below the text box values.
5. Check the inherit roles from groups to enable group permissions passed to users, this is enabled by default.
6. Click Save, then log out and log back in with a user in the group to ensure access.
Additional Information
Additional checks, verify the base DN search path for users and groups are pointing to a containing OU path for the requesting users and group. IF unsure, Use the top level of the domain to search for users and groups.
Feedback
