Return
-
Title
Dynamic group membership rule not populating after save -
Description
Dynamic Group Membership Rules work well when Preview Rule is selected, but does not populate after saving the rule update. This rule also contains capitalized Boolean values that get converted to lower case during execution.
-
Cause
When cross-domain membership is allowed in Dynamic Groups, the target domain will change the case of the Boolean value to lower case causing the entire query to return 0 results. -
Resolution
Remove the Cross-Domain Membership option from the dynamic group policy.
To Remove Cross Domain Membership in ActiveRoles Server:
- go to Configuration | Policies | Administration | Built-in | Dynamic Groups |
- Open the policy Built-in Policy - Dynamic Groups
- Select the Policies tab
- Double click the policy object starts with "Provides support for groups with rule-based...."
- Then the policy settings tab
- The first option is to enable or disable cross-domain membership.
See attached screenshot: Dynamic Group Policy Configuration
-
Change Request
TF00430153 -
Attachments
