ARS does not check for uniqueness when an e-mail address is added to the 'mail' attribute in the General tab
When modifying the mail attribute via the E-mail field in the General tab of the User Properties dialogue, Active Roles does not check if the address is unique, potentially resulting in duplicate email addresses.
This has been identified as a product defect with the Defect ID TF00704954.
Review the attached document on how to create a policy which will prevent the issue described.
Waiting for fix in a future release of Active Roles.