laptop and a wrench

Bug

If an existing user is deleted from Portal for ArcGIS that is configured with Integrated Windows Authentication (IWA) users and groups with enableAutomaticAccountCreation set to true and refreshUserMembershipDuringLoginEnabled set to true, and re-added to the organization within a small amount of time, that user loses access to items that are previously shared through the existing enterprise group until some time or until a manual membership refresh is executed.

Last Published: May 14, 2019 Portal for ArcGIS
Bug ID Number BUG-000120606
SubmittedMarch 7, 2019
Last ModifiedJune 5, 2024
Applies toPortal for ArcGIS
Version found10.6.1
Operating SystemWindows OS
Operating System Version2012 R2
StatusKnown Limit

Additional Information

This is a known limitation. If the administrator delete and add a user immediately, the administrator must wait an hour (not a whole day) before the permissions take effect. Since deleting and adding a user immediately is not a common user workflow in production, this issue is not addressed.

Workaround

1. Run the Refresh Group Membership operation from the admin endpoint if this happens and the user will be able to see the shared content
  • https://webadaptordns.esri.com/portal/portaladmin/security/groups/refreshMembership
2. Wait until the next day for the sharing to update3. Instead of adding that user right away, wait a couple hours and add the userĀ again. The process works.

Steps to Reproduce

Bug ID: BUG-000120606

Software:

  • Portal for ArcGIS

Get notified when the status of a bug changes

Download the Esri Support App

Discover more on this topic

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options