Receiving error 'You do not have the power to create the Group group_name in the container...' inste (NETIQKB22837)

fact
Directory and Resource Administrator 6.x

fact
Directory and Resource Administrator 7.x

symptom
Error: 'You do not have the power to create the Group group_name in the container ...' is received instead of the custom error message defined in the naming convention policy.

cause
This is by design.  ActiveViews are processed first and then the naming convention policy.

fix

If an ActiveView is defined with a rule to include all groups with name matching sales* and there is a naming convention policy defined in Directory and Resource Administrator (DRA) for groups, DRA will process the ActiveView rules first.  Because of this, the naming convention policy is never invoked and the custom error message of that policy will not be displayed.

As a potential workaround, you can define the ActiveView to include all groups instead of all groups with name matching sales*.  This would allow the naming convention policy to fire and hence, return the custom error message. 

Note:  The downside to the workaround, is that it will allow the Assistant Admin the ability to view all groups.

Formerly known as NETIQKB22837