With multiple Management Policies configured in Password Manager, if a user is in a group that is excluded from a Management Policy but is also in a group that is included in a different Management Policy, the user is unable to search for themselves in the PMUser site.
Consider the following scenario as an example:
In this scenario, the expected behavior is that the user should be searchable in the PMUser site and part of only Management Policy A. However, the user does not show up in the search as expected.
WORKAROUND
Do not exclude any groups where there may be user overlap with an included group. Rather, create unique groups to include in the Management Policy scopes that do not have any overlapping memberships.
STATUS
Waiting for fix in a future release of Password Manager.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center