The permission to Create/Delete objects is not applied correctly to Active Directory by Active Roles Access Templates
説明
When Active Roles templates which should delegate the ability to Create/Delete objects are synchronized to native Active Directory, they do not function as expected - the native permissions are not granted. The delegated permissions function as expected within Active Roles.
原因
This has been identified as a product defect and can be tracked as Defect ID TF00652937.
対策
WORKAROUND
Manually add the required permissions in native Active Directory.
STATUS
Waiting for fix in a future release of Active Roles.