Upon adding Groups to the namespace in Projects, Users within the group are not getting imported automatically

Products

• VCF Automation

Issue/Introduction

• When importing a Group and assigning a role (such as the "System Administrator" role), user information is not getting populated in the groups.
• The group is successfully imported, but the users do not populate in the group view until they individually log into the console.
• Deleting and re-importing the group does not change this behavior.
• Additionally, if you delete the group, the users of the group remain visible in the Users section and the users needs to be deleted manually.

Environment

VMware Cloud Foundation Automation 9.0.x

Cause

• This is an expected behavior. When importing a group into VCF Automation, the users are not synced automatically.
• The API called from the UI is:

  csp/gateway/am/api/orgs/<Org-ID>/groups-search?groupSearchTerm=<>

• This calls the underlying Tenant Management /scim/v2/Groups API to return the actual data. Tenant Management does not sync users in groups until they actively log in.

Resolution

This is an expected behavior.

Users in a group are not imported automatically when importing a group, you have two options:

• Allow the users to log into the portal. Upon their first login, the user will be created in VCFA and automatically associated with the group.
• Explicitly import the users manually if you require them to be populated and visible in the system prior to their first login.

Additional Information

If you are transitioning from VMware Aria Automation 8.x, please note that this is an expected change in behavior between the two versions.