Why rep:externalId property getting created for usergroups in AEM as cloud

[raju_komari]

Hi All,

We have created user groups through NC ACL tool Yaml files using below entries, rep:externalID property is getting added to usergroup after some time, we are unable to add this group into normal users due to this externalId property.

We are creating this groups on AEM as part of pipeline build, no usergroups creation on IMS side.

Is there any configuration in AEM as cloud which is getting added this property while synch is happening from IMS to AEM ?

Please share your suggestions/comments if you come across this type of issue in AEM as cloud.

Thank you. 

- DEF groupRootPath="/home/groups/healthcare"

- group_config:

    - content-authors-global:

      - name: "Content Authors Global QA DEV"

        path: "${groupRootPath}"

        isMemberOf: 

- ace_config:

    - content-authors-global:

        - FOR folder IN ${contentfolders}:           

            - path: ${folder.path}

              permission: allow

              actions: read,modify,create,delete,replicate

        - FOR folder IN ${conffolders}:           

            - path: ${folder.path}

              permission: allow

              actions: read,modify,create,delete,replicate

[muskaanchandwani]

Hello @raju_komari 

rep:externalId is a protected property which is a system-maintained marker that identifies an external user/group, i.e., one that is managed in an external identity provider and which is synched into the content repository for performance and compatibility reasons only.
Its value stores the configured name of the IDP ensuring that it is only modified by it's own provider integration.
An index assures the uniqueness of that property.

see also https://jackrabbit.apache.org/oak/docs/security/authentication/external/defaultusersync.html#default...