Through CA Service Catalog admin interface, administrators add permission from Active Directory groups to offerings in CA Service Catalog, but members of the given groups are unable to access those offerings and request items from CA Service Catalog. It happens when EEM (CA Embedded Entitlements Manager) is integrated to Microsoft Active Directory.
CA Service Catalog 17.1
CA Service Catalog 17.0
CA Service Catalog 14.1
When adding group permission to offerings, make sure the group name in CA Service Catalog, EEM (CA Embedded Entitlements Manager) and Active Directory are the same. Go to Active Directory and make sure there is no difference between the Group name and the Group name (pre-Windows 2000).