You are connected to a secondary administration server. You do not have power to create a group whe (NETIQKB4287)

fact
Directory and Resource Administrator 6.x

symptom
Error: 'You are connected to a secondary administration server.  You do not have power to create a group when connected to a secondary Administration server' When Attempting to Create a Group

symptom
Assistant Admins with the In ActiveView - Create a group or In ActiveView - Clone a Group power receive this error message when attempting to create a group account while connected to a secondary Directory and Resource Administration server.

cause
The creation of groups by an Assistant Admin with the above powers requires an object rule addition to an ActiveView.  When the Assistant Admin attempts to create the group,  DRA automatically adds a new rule to the ActiveView to include the newly created group.  Since changes to the DRA security model are only allowed while connected to the primary DRA server, the error message is displayed.

fix
To create a group in an ActiveView setup with either of these two powers, the Assistant Admin must connect to the primary DRA server.

Formerly known as NETIQKB4287