PowerProtect Data Manager: Users are unable to authenticate using active directory credentials when users are part of nested groups.
Summary: Users from nested active directory groups are unable to log in to PowerProtect Data Manager.
Symptoms
Active directory (AD) environment has groups as members within groups. Parent groups have been mapped within PowerProtect Data Manager (PPDM) for various roles. Only users which have been added directly to the parent groups can log in and perform the roles assigned. Members of the subgroups are unable to log in.
Example:
Top-level group assigned to the administration role: GroupA
GroupA has the following added under "Members":GroupB (member: UserB)GroupC (member: UserC)UserD
Only UserD can log in and perform administrative functions. UserB and UserC which are members of GroupB or GroupC are unable to log in.
Cause
Resolution
PowerProtect Data Manager only allows direct users from the groups added to PPDM. Groups which contain the users to whom permissions are to be assigned, should be added to PPDM.
Request for enhancement (RFE PPAS-I-1085) has been submitted for product management for review. If you are experiencing the same issue and would like your site to be associated with the RFE, contact DELL technical support and reference this article.