The option to set the primary group is available to Assistant Admins who have not been delegated the (NETIQKB46675)

  • 7746675
  • 02-Feb-2007
  • 19-Jun-2007

Resolution

fact
Directory and Resource Administrator 7.5

symptom
The option to set the primary group is available to Assistant Admins who have not been delegated the power 'Modify user primary group.'

symptom
Assistant Admins are able to see the Set Primary Group button even if they do not have the appropriate power.

symptom
The console enables the Set Primary Group button on user property sheets even if the AA does not have the appropriate power.

cause
This issue is caused by the user interface not doing a check for power over $McsPrimaryGroupPath. 

fix
To correct this issue, install DRA 7.5 Hotfix 47030. You can download this Hotfix at the following location: https://www.netiq.com/support/dra/hotfixes.asp#1304

Additional Information

Formerly known as NETIQKB46675