Hi Doug,
This behavior is actually by design. We do document this in the last several patch release notes (8.1 SP1 p3-p15).
To re-enable the group membership listing you can run the following:
To list all the user’s groups or only groups managed by Authentication Manager:
1. Log on to the appliance using an SSH client.
2. Change directories:
cd /opt/rsa/am/utils
3. Do one of the following:
- To enable listing all internal and external groups for the All Users report, enter the following command:
./rsautil store -o <OCadmin> -a add_config auth_manager.reports.principal.all_group true GLOBAL 500
***Note – Issue AM-29041 (resolved in patch 3) causes the Token Expiration report to fail if the report does not use the Identity Source filter and the all_group setting is set to true. To run the Token Expiration report successfully, include the Identity Source filter in the report job or disable the all_group setting as described in the next procedure.
- To enable listing the groups managed by authentication manager enter the following command:
./rsautil store -o <OCadmin> -a add_config auth_manager.reports.principal.registered_group_only true GLOBAL 500
4. Restart all Authentication Manager services on the primary server and replicas:
cd /opt/rsa/am/server
./rsaserv restart all
To disable listing all the user’s groups:
1. Do one of the following:
- To disable listing all internal and external groups for the user, enter the following command:
./rsautil store -o <OCadmin> -a update_config auth_manager.reports.principal.all_group false GLOBAL 500
- To disable listing the groups managed by authentication manager enter the following command:
./rsautil store -o <OCadmin> -a update_config auth_manager.reports.principal.registered_group_only false GLOBAL 500
2. Restart all Authentication Manager services on the primary server and replicas:
cd /opt/rsa/am/server
./rsaserv restart all
