Ranger Guardian is not displaying the correct Active Directory Group Names for users who has committed violations

Question

Why is the Guardian Console not accurately displaying the group information for the users who have commited violations?

Symptoms

All users listed in the violations some how are displaying their Group Names as DEFAULT.

Resolution

Below is how we set up A/D sync, it may be worth cross referencing this. (please not group migration should only be set on the default user group and the new group name needs to match the Security group name in their A/D)

1. Log onto the Securus console
2. Go to Administration>User Groups List
3. Edit the default group
4. Select Active Directory from the migration drop down box
5. Enter your main Active Directory server name in format \\servername in the box below
6. Click OK
7. Now create the groups in user group list with exactly the same name as in Active Directory (copy and paste from Active Directory is advised) making sure you DO NOT turn group migration on nor enter the server name as in point 5.

PLEASE NOTE: You can only use security groups not OU’s (security groups are the groups shown when you click a user’s member of tab).

It might take some time to update the existing details listed in your violations section.