Unable to Search Members of a Global Group in the EEM GUI

Document ID : KB000008640
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

In the EEM 12.51 GUI, an attempt is made to search for members of a global group using the User Search fields in the "Manage Identities" tab. The following values are specified in the User Search fields...

Attibute: ...
Name: pzGroupMembership
Operator: LIKE
Value: Group* (an active directory group/global group)

The search results in the following error...

EE_POZERROR Repository Error
ISE_ERROR_UNKNOWN unknown isponsor error

Resolution:

When the EEM User Store configured for Active Directory, the "Name" attribute in the User Search field should be "memberOf". Also, you are not able to use a wildcard in the Value attribute. You must put the full DN of the group from Active Directory. This is a limitation for Active Directory searches.