An Active-Directory-authenticated user gets an access-denied login error ('User not allowed access... User not set as Active / User is not granted connect privileges'), even though the user's IFS account shows as Active and unlocked, and the database-level user is confirmed connected.

All FAQ questions / Security and access

Answer

Check the user's Active Directory group memberships specifically, not just their IFS user record — if AD-based authentication is in use, this kind of denial can happen when the user's own IFS account and database connection are both fine, but the user is missing from the specific AD group that IFS's authentication/authorization setup expects for granting access. Adding the user to the correct AD group resolves it without needing any change on the IFS side itself.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions