Users and Group Owners are unable to see their groups

Hello all,
I have an issue where security group owners are unable see/read any groups that they own. I have enabled the following MPR's but still nothing please help.
Group management: Group administrators can create and delete group resources
Group management: Group administrators can read attributes of group resources
Group management: Group administrators can update group resources
Security group management: Owners can read selected attributes of group resources
Security group management: Owners can update and delete groups they own
Security group management: Users can read selected attributes of group resources
Also when a user logs into the portal they are unable to see any Security groups listed under MY SG Membership. However when we check the group membership they are indeed part of the group both in FIM portal
and AD.

Reason might be that user's don't have access to group objects at all or are not able to read some of attributes of a group. Also make sure that BasicUI keyword was added to the specific elements of UI used in group management - this includes navbars but
also search scopes which are used for group filtering.
On the MPRs side:
Make sure that your Security group users set was not modified - maybe people are filtered out from these MPRs.
Use explore function in MPR part of a portal to check what actual MPRs are being triggered when user tries to access group object.
Tomek Onyszko, memberOf Predica FIM Team (http://www.predica.pl), IdAM knowledge provider @ http://blog.predica.pl
Hi Tomek,
Which attributes must a user be able to read in order for this to work? If possible can you provide me with a full list so I can verify that they do have rights to read them.
I have added the keywork BasicUI to the following sections
Under Home Page Resource
Join a SG
Manage my SGs
Search Scopes
Security Groups (SGs)
See my SG memberships
Under Navigation Bar Resource
My SG Memberships
My SGs
Security Groups (SGs)
As for the security group users set, I have modified it to allow all domain users to be part of this set. When I click View Members all users are listed.
"Use explore function in MPR part of a portal to check what actual MPRs are being triggered when user tries to access group object. " How would somebody go about doing this?

Similar Messages

Users are unable to see their own profile photo although everyone else can see it in Lync 2013 client

We have Lync 2013, Exchange 2010 and several AD
servers in mixed mode 2003/2008.
All user are unable to see their own profile photo
either in the main Lync window, in the settings or in a chat although other user can see that their photo is there and displaying. The user experiencing the issue can go open Outlook 2013 client and will see their photo displaying correctly in the file menu
(and elsewhere) here.
I have confirmed this happens with any new users I set up as well. We have gone through a fair amount of troubleshooting with other Lync photo issues and simple fixes such as deleting the SIP cache folder etc proves to be ineffective.
Our Cs-ClientPolicy Global is set to websearchonly.
We have "Replicate this attribute to the Global Catalog" set
for the ThumbnailPhoto attribute in AD.
We are also forcing photos from AD only (or no photo) by setting the following:
"Set-CsClientPolicy -Identity PhotosControl -DisplayPhoto
PhotosFromADOnly"
and finally we are importing the photo in ad using this PS command:
"Import-RecipientDataProperty -Identity "Test User"
-Picture -FileData ([Byte[]]$(Get-Content -Path "C:\pictures\testuser.jpg" -Encoding Byte -ReadCount 0))"
The pictures being uploaded are under 10KB in size.
I have followed many threads and will provide any information I can to help find the problem. Thank you in advance.
EDIT: I have also tried the following but with no success: https://knowledge.zomers.eu/misc/Pages/How-to-fix-your-photo-not-showing-up-in-the-Lync-client.aspx

Hi Jdentremont,
Lync client gets user photos by first querying the Address Book Web Query (ABWQ) service on the server, which is exposed through the Distribution List Expansion web service. The client receives
the image file and then copies it to the user's cache to avoid downloading the image each time it needs to be displayed. The attribute values returned from the query are also stored in the cached Address Book Service entry for the user. The Address Book Service
deletes all cached images every 24 hours, which means that it can take up to 24 hours for new user images to be updated in the cache on the server.
To troubleshoot your problem, please follow the steps below:
1. Navigate to
“X:\share\1-WebServices-1\ABfiles\000000000\000000000” folder. (ABS file share)
You should see some photo files in this folder as the following screenshot.
2. Delete all the files in this folder.
3. On test PC, delete local cache files.
%userprofile%\AppData\Local\Microsoft\Office\15.0\Lync\[email protected]
4. Sign-in Lync with the test account.
5. Go back to the ABS file share, check if there is any Photo file in the folder.
Best regards,
Eric
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

When using the camera downloader in Adobe Bridge CS6 with Nikon D5200 we are unable to see previews of the photos and it is very slow to download. The issue occurs under a the users rights, but not under admin level. This is a new issue

When using the camera downloader in Adobe Bridge CS6 with Nikon D5200 we are unable to see previews of the photos and it is very slow to download. The issue occurs under a the users rights, but not under admin level. This is a new issue.

Hi Jdentremont,
Lync client gets user photos by first querying the Address Book Web Query (ABWQ) service on the server, which is exposed through the Distribution List Expansion web service. The client receives
the image file and then copies it to the user's cache to avoid downloading the image each time it needs to be displayed. The attribute values returned from the query are also stored in the cached Address Book Service entry for the user. The Address Book Service
deletes all cached images every 24 hours, which means that it can take up to 24 hours for new user images to be updated in the cache on the server.
To troubleshoot your problem, please follow the steps below:
1. Navigate to
“X:\share\1-WebServices-1\ABfiles\000000000\000000000” folder. (ABS file share)
You should see some photo files in this folder as the following screenshot.
2. Delete all the files in this folder.
3. On test PC, delete local cache files.
%userprofile%\AppData\Local\Microsoft\Office\15.0\Lync\[email protected]
4. Sign-in Lync with the test account.
5. Go back to the ABS file share, check if there is any Photo file in the folder.
Best regards,
Eric
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

In system settings 15 item are not accessible, get the message: cannot open it, is not possible on intel based MAC. Items like security, i cloud user and groups network and more

in system settings 15 item are not accessible, get the message: cannot open it, is not possible on intel based MAC. Items like security, iCloud user and groups network and more.
Genius bar told me to erase the harddisk and install OSX Maverick again. This has not changed the problems with the system settings

You need to Repartition the drive as One partition which will erase all data from it and then reinstall OS X. then with the initial setup system you chose the language on the first screen that comes up. That sets the language for the whole system.
There is no other way of completely removing certain information created by a previous owner. this hold strue whether you are selling or give a Mac to someone.
To do the repartitioning you need to use the Online Internet Recovery system, if the Mac came with Lion 10.7 or above, or from the original system reinstall discs that came with it when it was new.

Unable to initialize LDAP (No LDAP server is configured)show in the admin server of iWS6.0 users and group

When I goto web server administration in users and group tab it alway show me Unable to initialize LDAP (No LDAP server is configured) Is it cause the effect to use web server because I use iWS with ias .
If it cause some effect ,Please let me know how to configured LDAP server.

Run this Command from the Exchange Server
Net time \\ADServerName /Set
and confirm the action,
and then you need to restart the service
Microsoft Exchange Active Directory Topology Service
and confirm you are not getting the Error 4001 in the event Viewer.
Thank you, it resolved my issue after being sweating looking for solution.
How can I prevent this from happening? I cannot restart services on each server reboot nor lose 5 years of my life!!!
Sokratis Laskaridis MCP, MCTS, MCITP, Small Business Specialist Netapp ASAP, Symantec STS

I successfully deleted a user from my MacBook through the Users and Groups window in System Preferences. But now I cannot close the lock in the bottom left corner of the box. When I click on it, I briefly see a word that I think says "reauthorizing" but

I successfully deleted a user from my MacBook through the Users and Groups window in System Preferences. But now I cannot close the lock in the bottom left corner of the box. When I click on it, I briefly see a word that I think says "reauthorizing" but the word flashes too quickly to tell for sure.

If you are admin.
Try restarting your Mac.

Subject area security validating users and groups from external table

Hi all.
I don't have practice to put question here, but there is one problem, that seems don't work correctly in OBIEE.
I'm trying to put users in groups within external table and this works fine.
I put security on the subject area level like this:
SA1 -> GroupA allow, Everyone not allow
SA2 -> GroupB allow, Everyone not allow
External table:
User----------Group
A---------GroupA;GroupB
B---------GroupB
Users A, B and GroupA, GroupB exists in the RPD, but I didn't put users inside them, I want this from table.
From the init block, external table I'm taking users and join them in the group. Same name users and groups are also in the presentation service.
When i connect with user A i don't see any subject area, when go to My Account i see in Group Membership/GroupA and GroupB, so it's readed from the external table.
Why in this case the subject area permission is not working?
It works if I explicitly put users in groups, in the RPD.
I have read this blog entry http://kpipartners.blogspot.com/2009/07/groups-webgroups-and-delivers.html and it is said that this works, but I'm interested how.
What should we have in the presentation part, administration, Manage Privileges -> Access within Oracle BI Answers option for those two subject area?
This doesn't work or something is missing:
Re: Security on Subject Areas
Regards
Goran
http://108obiee.blogspot.com

What should we have in the presentation part, administration, Manage Privileges -> Access within Oracle BI Answers option for those two subject area?Yes, you should remove Everyone and add the relevant groups to each Subject Area. You don't need to set privileges in the RPD, in fact that's probably why it doesn't work for you. Leave your RPD Presentation Catalog as "Everyone" = Read as you will controlling access from the Presentation Services and it should work.

Libvirt-1.2.12-1 user and group owners differ

Hello!
During the latest upgrade pacman complains about differing directory permissions for libvirt:
warning: directory ownership differs on /var/cache/libvirt/qemu/
filesystem: 99:78 package: 0:0
warning: directory ownership differs on /var/lib/libvirt/qemu/
filesystem: 99:78 package: 0:0
This are the user and group, not file mode ("rwx")! In this case the directories are currently owned by the user "nobody" and the group "kvm", while the package thinks actually "none" should own that directories. Should I change that manually?
Thanks
Hoschi
PS: I currently doesn't use QEMU and KVM, but that can happen very fast and than it need to work out-of-the-box
Last edited by hoschi (2015-01-28 17:30:06)

Just to clarify, that "none" (0:0) is actually root, that is root:root
I hope someone else can step in in order to tell you if a manual change is advised which I would understand as positive though better safe than sorry.

User and group settings are not pushed

Hello,
I am just setting up a Mavericks environment including Server.app and I am facing a problem that I could not solve up to now.
None of my profile manager settings for users or groups are pushed to the mobile users on my client computer. The device registration worked without problem and also the computer settings are pushed but not the ones for user and group settings.
In my productive mountain lion environment this is no problem.
Is there any was to force the settings update for users as it is possible for computers?
Any hints are appreciated
Michael

I too am having this issue.. I had my school environtment running great on 10.8... then we had to upgrade the server to 10.9 to use the new volume purchashing stuff with ipads.. now this 10.9 has broken all my previous macbooks in the school... I can enroll, install certs, and some networks stuff but the main group with all the macbooks and restrictions will not push... it even removed them from the machiens that were working with 10.8... very big issue.. apple needs to help?

HT204347 I CAN'T KEEP MY MACBOOK PRO FROM SHOWING APPLEMAIL WHEN I START UP. I HAVE GONE TO SYSTEM PREFERENCES, USERS AND GROUPS, AND THERE ARE NO LOGIN ITEMS LISTED. WHAT DO I DO?ERENCESS,

I cannot keep my computer from showing applemail mailboxes when I start up. When I go to system preferences, users and groups, login items nothing is listed. If I try listing mail and then restarting and deleting it, that does not work. What to do next?

System Preference > General
At the bottom of the section "Number of recent items"
uncheck the box next to "Restore windows when quitting and re-opening apps".
Best.

User In Planning unit Hierarchy unable to see data form in editable mode

hi all,
we are facing a problem in planning unit hierarchy in Hyperion planning, where we have 4 users, Hierarchy is define as
hierarchy: budget approved
version: approved
Entity: Finance
Senario:Budget
haroon asghar ( owner)
adeel javid (Reviewer)
Naeem asghar (Reviewer)
Imtiaz (Reviewer)
Issue is that,after start the budget activity (promotional path) by Admin, the data form editable to Owner haroon asghar
but after completing his work by haroon,when he promote the planning unit ,the next user in Hierarchy "Adeel javid" unable to see data form in respective planning unit in uneditable data form not only for this user but all rest of the users as well,while i think data form should only uneditable(grayed) for user Haroon Asghar who promote the planning unit.
we have checked all security rights to the users those are "Write access" but still Adeel javid is unable to enter data,so the budget activity is stop due to this problem.
when i remove the planning unit then i log in with all user one by one and see all data form required version,scenario and entity were editable to all users mention above
we want to run budget activity with the above planning unit hierarchy.
plz any one provide the proposed solution of the said issue
we are using Product Version 11.1.2.0.00
Regards
Anwar

Reviewers will not be able to write data to the intersection. Reviewers can only review the data and follow-up with a Reject, Promote, Sign off, Delegate, Originate or Freeze.
Please refer Article ID 1226783.1 in MOS.
HTH-
Jasmine.

No user and group in console of OBIEE 11g

Hi,
I'm facing a problem in OBIEE 11g, after I login the console, in security realms, there is no user and group in it, all services has been started, and it prompt following message:
This page is not available because the necessary security providers have not been configured, or those configuration changes are pending and not yet activated. Please activate the changes and (if necessary) restart the Admin Server to make this page available.
thank you!

Hi Edhiggins
Iam also facing the same issue i tried to configure the Microsoft Active Directory.Is it necessary to go to the enterprise manage and have to configure the virtualisation =true and user.login.attr ,after completion of all the steps that are needed in the console .I am unable to see weather it was configure successfully or not while i login to the console and there iam seeing the above issue.
pls clarify the issue more clearly

Admin Console not displaying new Users and Groups from LDAP

We created a new Realm in WebLogic, which specifies the location of the Netscape
LDAP server. Our Weblogic application, called TGSLC, is able to find the ldap
server to use for authentication. My problem is this- the Admin Console is not
displaying the new users and groups from the LDAP server. Shouldn't the WebLogic
Admin Console display any users and groups specified in the ldap server, which
is referenced in the customized Realm?

Hi Andy,
I am not sure why you are unable to see the users and groups through the
console., you should be able to. Can you post the config.xml?
thanks,
-satya
Andy Levy <[email protected]> wrote in message
news:3b700c36$[email protected]..
>
We're running WLS 6.0 Sp2 on Windows 2000 Professional.
"Satya Ghattu" <[email protected]> wrote:
Andy,
Could you please tell us what Version of Weblogic you are running?
thanks,
-satya
Andy Levy <[email protected]> wrote in message
news:[email protected]..
We created a new Realm in WebLogic, which specifies the location ofthe
Netscape
LDAP server. Our Weblogic application, called TGSLC, is able to findthe
ldap
server to use for authentication. My problem is this- the Admin
Console
is not
displaying the new users and groups from the LDAP server. Shouldn'tthe
WebLogic
Admin Console display any users and groups specified in the ldap
server,
which
is referenced in the customized Realm?

MAJOR Open Directory issue: Can't assign Users and Groups that DO exist!

Just noticed the following today:
When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
When I go into WGM -> Sharing, and look at files/folders on File Server share this way, the Owner and Group fields are blank.
When I attempt to (re)assign an Owner or Group by dragging them from Users and Groups section of WGM, error tells me User or Group no longer exists. These Users and Groups clearly do exist in WGM -> Accounts.
When I look at files on File Server share via CLI, instead of actual names for Users and Groups, I see their uid and gid's. Chowning via CLI fails as well.
I've noticed all Users and Groups with this issue are OD.
Server is xServe G4 DP 1.0 GNz/1 GB RAM/Mac OS X Server 10.4.7 Unlimited. This servers been running fine as an OD Master for months now. ACL's are enabled on this File Server share point. I've always had weird permissions issues, but NEVER the inability to assign OD Users and Groups to files/folders.
I'm at a loss here, not to mention my wits end.
Did my OD become corrupted?
Any and all help would greatly appreciated.
PowerMac G4 733 MHz Mac OS X (10.4.6) 512 MB RAM

When doing Get Info -> Permsissions on files/folders located on my File Server share, Owner and Group show as (unknown).
This means that the Finder can't find a match in the accounts/groups database for the numeric UID assigned to those files. Either the records associated to those accounts have been deleted, or the database is corrupt. In either case, you should restore a copy of it from backup.
(15686)

Upgraded to 3.1 and lost all users and groups. How do we get them back?

We ran the update to Server 3.1 (from 3.0) on our Mavericks Mac-Mini Server.
Everything had been fine before the update, but now all users and groups have completely disappeared.
The only user we have is the main administrator log-in.
Since we verified that all of our data, wikis, and other items are still in place, it might be easier to just re-create the groups and users (and permission therein).
But, we cannot log into Workgroup Manager, nor can we add users/groups in the Server app (because it is "grayed-out").
Can somebody please provide a suggestion??
We are a small engineering firm with only 5 users, so it's not like this would take all day.
Thanks, Mike

Have you tried
sudo sso_util configure -r REALM_NAME -a diradmin afp
(cf. Lion Server: AFP users unable to authenticate with Kerberos after upgrading)in Apple Support ?
p.

Users and Group Owners are unable to see their groups

Similar Messages

Maybe you are looking for