Group membership approval not working for DL

HI team,

We have separate user domain and resource domain. Exchange is in resource domain for which users master accounts is in user domain. so linked mailboxes in resource domain.

Few Distribution list in resource domain's exchange has owners defined and membership addition / deletion should happen through approval from owner for that DL. 

In Resource domain all users are in disabled state as their mater accounts are in user domain. hence all DL contains members and owner are also from resource domain so are disabled.

now when approval request going to owner of that group, he is not able to approve the request. seems like approver is using user domain account to approve the same as he cant use resource domain account as that is disabled.

error is coming as unauthorized operation.

Please help to fix the issue.

Thanks 

Anees 

Parents
  • I assume that your accounts domain and resource domain are both under the management of Active Roles.  Why don't you populate the DL owner property with the accounts domain user account.  Then populate the 'mail' attribute on the accounts domain user so that they can get the e-mail notification about the approval.

  • Hi Johnny,

    Thanks for your quick respond on this.

    Yes, both the domains under ARS. We can't add account of user domain into DL's owner as DL are global group and our user domain is altogether different forest.

    Owner is even getting mail because their resource domain id is added in DL as a primary and/or secondary owner, but they are not able to approve the request, as ARS approval page opens with their user domains account and while approving it fails with error : unauthorized operation.

Reply
  • Hi Johnny,

    Thanks for your quick respond on this.

    Yes, both the domains under ARS. We can't add account of user domain into DL's owner as DL are global group and our user domain is altogether different forest.

    Owner is even getting mail because their resource domain id is added in DL as a primary and/or secondary owner, but they are not able to approve the request, as ARS approval page opens with their user domains account and while approving it fails with error : unauthorized operation.

Children
No Data