Can't see members of a group where I am the manager

Question

On the Adaxes self-service page, I am able to navigate to 'My Managed Objects' and select from the groups I manage, but the members of the group are not shown. Same thing happens to all other users who are a Manager of any groups. We do not have any rules set up to block this. Not totally sure if this is a permissions issue. Screenshot below.

Anything to point me to the right direction would be appreciated.

Comments

Hello,

Do we understand correctly that the group actually has members (e.g. you can see that in AD using native tools)? If that is so, please, specify whether you can see those members themselves in Adaxes Administration console (not in the Members section of a group properties but generally).

---

The goup in the screenshot is an Entra group so its not in our on-prem ADAC, but yes the group members do show in Entra. I've tested this with an on-prem group and all members are showing up so it looks to be isolated to Entra groups.

---

Hello,

In the previous post, we asked whether you can see the members themselves outside the Members section when viewing groups (e.g. just browsing). Is that so or you cannot see them anywhere?

Also, for troubleshooting purposes, please, connect to your Adaxes service in the Administration console with the credentials of the Adaxes service account (specified during Adaxes installation). Does the issue persist in this case?

---

In the previous post, we asked whether you can see the members themselves outside the Members section when viewing groups (e.g. just browsing). Is that so or you cannot see them anywhere?

I've done a bit more investigating and this seems to only affect Entra groups, not on-prem. When browsing in the Admin console while logged in with the Adaxes service account, I am able to see the members of a group ONLY if the group is on-prem. No Entra groups show any members.

Being logged into the Adaxes service account did not make a difference unfortunately.

---

Hello,

Sorry for the confusion, but you are still not answering the main question. You mentioned that in Microsoft Entra itself, you can see users that are members of groups. In Adaxes Administration console, please, do the following:

1. Expand your Adaxes service node
2. Expand Managed Domains.
3. Expand your Microsoft Entra domain.
4. Expand the Users OU.

Can you see the users in question in the OU?

---

Yes, I can see users in that OU, but only disabled users in our tenent.

Answer 1

Hello,

Please, check the unmanaged accounts list. Most probably, the accounts were added to it to avoid license violation. The following article will be helpful: https://www.adaxes.com/help/AddUsersToUnmanagedList.

Comments

The instructions that were linked to not coorespond to what I am seeing. I do not see a 'License' section or a 'Restrict' button.

---

Hello,

Sorry for the confusion, but we are not sure what you mean. Your screenshot does show the Licensing section and the Restrict button is on the right.

---

Apologies, I see it. Thanks

---

I've removed the members from the unmanaged list, but they are added back overnight to the unmanaged list. We don't have any tasks that would contribute to this and I don't see anything in the logs in regard to those members.

---

Hello,

The only possible option here is a scheduled task with a script. There is no built-in functionality to add user accounts to the unmanaged list. You can use the following script from our repository to find the one making the changes: https://www.adaxes.com/script-repository/search-and-replace-text-in-adaxes-scripts-s224.htm. The below command should give you the exact data:

.\MyScript.ps1 -textToSearch "SetUnmanagedAccounts"

---

Thank you, it does seem that we have a 'Licensed User Filter' task that runs every day at 5am that is adding these users back to the unmanaged list.