Resolution
Directory and Resource Administrator 7.x
symptom
Error: The AssistantAdmin does not have enough powers to run this 'GroupMemberAdd' operation.
symptom
Assistant Admins are unable to add some users to groups in DRA.
cause
The ActiveView does not contain rules for the specified user objects. The ActiveView does not contain rules for both the groups and the user objects.
fix
DRA ActiveViews for GroupMemberAdd operations must contain rules for both the group objects and user objects being acted on. The ActiveView requires a rule for the group(s) for which you want the Assistant Admin to add membership. The ActiveView also requires a rule for the user objects (wherever they may be) you want the Assistant Admin to add to the groups.
A common problem with the GroupMemberAdd operation is that the ActiveView does not correctly define the scope for the users you want the Assistant Admin to add to the group. To resolve this issue, include a rule (or rules) in the ActiveView that include ALL user objects the Assistant Admin should be able to add to the group. The ActiveView should also include the delegation for either the Add Object to Group power or the Add New User to Group power or both.