Unable to Search Members of a Global Group in the EEM GUI

Document ID : KB000008640
Last Modified Date : 14/02/2018
Show Technical Document Details

In the EEM 12.51 GUI, an attempt is made to search for members of a global group using the User Search fields in the "Manage Identities" tab. The following values are specified in the User Search fields...

Attibute: ...
Name: pzGroupMembership
Operator: LIKE
Value: Group* (an active directory group/global group)

The search results in the following error...

EE_POZERROR Repository Error
ISE_ERROR_UNKNOWN unknown isponsor error


When the EEM User Store configured for Active Directory, the "Name" attribute in the User Search field should be "memberOf". Also, you are not able to use a wildcard in the Value attribute. You must put the full DN of the group from Active Directory. This is a limitation for Active Directory searches.