A Configuration Context Mapping expression meant to say "apply this context to users NOT in group X" ends up applying (or not applying) inconsistently, working sporadically rather than reliably excluding just that group.

All FAQ questions / Security and access

Answer

This expression style has been observed to only behave reliably when every user actually belongs to at least one user group — if some users belong to no group at all, the "not in group X" condition seems to evaluate as true for them regardless of intent, effectively treating an ungrouped user as matching every exclusion; adding a catch-all group (like "ALL") that every user is a member of makes the not-in-group-X expression behave consistently for everyone.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions