LDAP group permission in CA Service Catalog

[Lucas Mesquita]

When setting up permissions for a specific service offering, whenever I select an ldap group, members of this given group are still unable to request through this offering; 

 

Is there any other in place or configuration I need to to set in order for this to work?

[Iain Lambert]

Hi,

Are you using a single LDAP binding in EEM, a local store or multiple LDAP directories? This will slightly alter how you reference these.

Also, do Application Groups work for you with permissions?

 

thanks

Iain

[Louis van Amelsfort]

Good Afternoon Lucas.

When indeed you have configured EEM for AD/LDAP, then AD is leading.
Which means that every group to be shown in EEM, needs to be created in AD.
Since EEM only retrieves it's information from AD, once configured for such.

As per Iain's update, please do check whether you have defined the Application Groups within EEM too.
For EEM, login to application='Catalog' and check for existing groups.
You need 'Application' groups, not 'Global' groups to be defined in EEM, for Catalog to see those groups for permissions settings.

Kind regards, Louis.

[Lindsay_Estabrooks]

Do you need to specify the members of an Application Group manually or is there a way to have the members of a Global Group automatically become members of an Application Group?