Error: 'The assistant admin does not have enough powers to run the 'UserDelete' Operation.' (NETIQKB44094)

fact
Directory and Resource Administrator 7.x

symptom
Error: 'The assistant admin does not have enough powers to run the 'UserDelete' Operation.'

symptom
Error occurs when trying to delete a user from the Recycle Bin.

symptom
The 'Delete User from Recycle Bin' power has been assigned.

cause
The ActiveView for the Assistant Admin (AA) or Assistant Admin Group (the 'Delete User from Recycle Bin' power was delegated to) does not contain a domain rule for all user objects.

fix

Without having access to the user objects that are in the Recycle Bin container, the Assistant Admins (AA) or AA Group would not be able to manage or perform any powers over them. To resolve this, include the following rule in the ActiveView:

Domain Rule - Include objects in domain <domain name> that are Users

Formerly known as NETIQKB44094