Secondary owners assigned directly through Active Directory attribute msExchCoManagedByLink outside of Active Roles, do not appear as Secondary Owners within Active Roles.
As a result, these users are not displayed under the group's Secondary Owners list in Active Roles.
Active Roles maintains its own authoritative list of group secondary owners using the following attributes:
edsvaSecondaryOwnerGUIDs (source of truth)
edsvaSecondaryOwners
Active Roles synchronizes this information outbound to the Active Directory attribute msExchCoManagedByLink. However, this synchronization is one-way only.
Enhancement request 726717 has been proposed to provide an optional and configurable inbound synchronization mechanism that would allow Active Roles to recognize and honor secondary owner values stored in msExchCoManagedByLink.
© 2026 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center