The built-in Group Administration role does not have Delete powers. (NETIQKB51043)

fact
Directory and Resource Administrator 7.5

symptom
The built-in Group Administration role does not have Delete powers.

symptom
The Group Administration role is unable to delete groups.

symptom
My built-in role does not have the ability to delete the objects it controls.

cause
While the other object-type Administration roles include the Delete power over their corresponding objects, the Group Administration role does not.

fix

An enhancement request has been opened with Development to consider adding the Group Delete power to the Group Administration Role in a future release of the product.

As a workaround, you can delegate the individual Delete Group power in the same ActiveView in which you delegated the built-in Group Administration role. This gives the Assistant Admin (AA) the powers of the Group Administration role, in addition to the specific Group Delete power.

note

For more information, see the Directory and Resource Administrator User Guide.

Formerly known as NETIQKB51043