This is expected product functionality.
When performing a search in the Active Roles Web Interface, the exact filter specified is converted to an LDAP filter.
So, choosing to query the a Name(cn) value will query the cn of all objects, not just the object class where the attribute was selected.
WORKAROUND
To filter search results to a specific object class, add a filter limiting the results as desired.
For example:
objectClass equals group
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center