There is a user HM99541 with multiple AD accounts - HM99541 and TS99541.


 

The user has access to AD group "CMHUB -R" through the HM# account.


However, the "CheckAccess" API call returns "result=true" when checking for the group access to the TS# account but the "TS#" account does not have that group access



Also when an account is locally mapped to one user only


the API for checking the group should return false it returns an error instead


 

<html>

<head>
	<title>Error</title>
</head>

<body>could not resolve multiple users account for checking group memebership
	Query
	String=cmd=checkAccess&amp;accountBS=Active%20Directory&amp;accountName=Abse1943&amp;entitlementBS=Active%20Directory&amp;token=ws31586405e9d7afd6f6:-3ce0f892:17791a7cc3d:-36f00.4189250509477934&amp;group=grp1
</body>

</html>

• RSA Identity Governance & Lifecycle 7.2.1 P02