A group search in Identity Manager may fail with the following errors:
ERROR findGroupsAdminCanManageInScope for context
Facility=6 severity=3 reason=0 status=9 message=A bad expression was encountered
This is due to a missing scope filter in the group search screen in question. In versions prior to IM 12.6, if there was no filter defined, all groups would be in scope.
Identity Manager 12.6.x
Modify the Group Search screen that is throwing the error.
Under the heading labelled "Show only objects meeting the following rules", add a valid filter that applies to your business logic.
If you want to show all groups that the logged in user is an administrator of, construct a filter like:
Group Name = *
You cannot leave this blank, as the code treats this scope filter as required.