All User report with Group Column Doesn't Show Groups. I know there are groups because they show when I pull an All Groups report with counts. I used the "All Users" template and added "Member of User Groups" and ran it but when I downloaded it to a .csv file there were no groups.
Hi Doug,
This behavior is actually by design. We do document this in the last several patch release notes (8.1 SP1 p3-p15).
To re-enable the group membership listing you can run the following:
To list all the user’s groups or only groups managed by Authentication Manager:
1. Log on to the appliance using an SSH client.
2. Change directories:
cd /opt/rsa/am/utils
3. Do one of the following:
- To enable listing all internal and external groups for the All Users report, enter the following command:
./rsautil store -o <OCadmin> -a add_config auth_manager.reports.principal.all_group true GLOBAL 500
***Note – Issue AM-29041 (resolved in patch 3) causes the Token Expiration report to fail if the report does not use the Identity Source filter and the all_group setting is set to true. To run the Token Expiration report successfully, include the Identity Source filter in the report job or disable the all_group setting as described in the next procedure.
- To enable listing the groups managed by authentication manager enter the following command:
./rsautil store -o <OCadmin> -a add_config auth_manager.reports.principal.registered_group_only true GLOBAL 500
4. Restart all Authentication Manager services on the primary server and replicas:
cd /opt/rsa/am/server
./rsaserv restart all
To disable listing all the user’s groups:
1. Do one of the following:
- To disable listing all internal and external groups for the user, enter the following command:
./rsautil store -o <OCadmin> -a update_config auth_manager.reports.principal.all_group false GLOBAL 500
- To disable listing the groups managed by authentication manager enter the following command:
./rsautil store -o <OCadmin> -a update_config auth_manager.reports.principal.registered_group_only false GLOBAL 500
2. Restart all Authentication Manager services on the primary server and replicas:
cd /opt/rsa/am/server
./rsaserv restart all
Yasmine,
Yes, sorry that I didn't come back and let Brian know that the information was very helpful. The only problem is our on-site tech guy is not willing to apply the patch so I have to go at it a different way.
Thanks
Hi Doug Belcher,
Was the provided resolution helpful?
Thanks,
Yasmine