Searching for a group fails with ERROR: Did not find definition for type GROUP findGroupsAdminCanManageInScope for context

Document ID : KB000006152
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

A group search in Identity Manager may fail with the following errors:

ERROR findGroupsAdminCanManageInScope for context

Facility=6 severity=3 reason=0 status=9 message=A bad expression was encountered

Environment:
Identity Manager 12.6.x
Cause:

This is due to a missing scope filter in the group search screen in question. In versions prior to IM 12.6, if there was no filter defined, all groups would be in scope.

Resolution:

Modify the Group Search screen that is throwing the error.

Under the heading labelled "Show only objects meeting the following rules", add a valid filter that applies to your business logic.

If you want to show all groups that the logged in user is an administrator of, construct a filter like:

Group Name = *

You cannot leave this blank, as the code treats this scope filter as required.