Return
-
Title
Group Members from a foreign Domain are present in the Active Roles Console but not in the Active Roles Management Shell -
Description
Querying a Group in the local Domain which contains members of a foreign Domain shows all members when using an Active Roles Admin or an account with unrestricted access, but is missing the foreign members when viewing Group members in PowerShell.
The Active Roles Console shows all Group members, even when logged into the account as the delegated admin.
-
Cause
The Access Template linked to the delegated admin is missing list permissions. -
Resolution
Add List and List Contents for Group objects into the access template linked to the foreign Domain.