In CQ, is there a limit to how many other groups can be members of a Group? | Community
Skip to main content
hdwu
October 16, 2015
Solved

In CQ, is there a limit to how many other groups can be members of a Group?

  • October 16, 2015
  • 2 replies
  • 902 views
Is there a limit to how many other groups can be members of a Group?
Is it not possible to add an AD-based group to another AD-based Group?

Yesterday I added an AD-based group that I created as a member of another group which already included the default 'Contributors' group (through the 'Users' module in the 'Groups' tab- not through CRX), Saved, and permissions were granted to members of that group as expected.

Today when I logged back in, the AD-based group that I added yesterday was gone, but the original 'Contributors' group was still there. The permissions for members of this group were obviously impacted and I'm trying to trouble-shoot why my edits from yesterday didn't last...
 
    This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
    Best answer by Sham_HC

    There is no limit. Offcourse keep minimum for easy managing & classification.  How many groups member list you are targeting here?

    If you have added  AD_Group into another AD_Group at CQ then you might loose if you have configured auto sync of group.   To avoid it add Group at ldap level only. 

    2 replies

    hdwu
    hdwuAuthor
    October 16, 2015

    Aha- that is what's happening. So the solution is to either:

    1- add AD group to another AD group via LDAP, OR
    2- create a CQ group with the desired permissions and add the CQ group to the AD group

    Thanks very much for the help!

    Sham_HC
    Sham_HCAccepted solution
    Level 10
    October 16, 2015

    There is no limit. Offcourse keep minimum for easy managing & classification.  How many groups member list you are targeting here?

    If you have added  AD_Group into another AD_Group at CQ then you might loose if you have configured auto sync of group.   To avoid it add Group at ldap level only.