Resolve duplicate user groups in AEM after renaming a Product Profile
This article describes why duplicate user groups appear in Adobe Experience Manager (AEM) after renaming a Product Profile in the Adobe Admin Console, and provides steps to identify and safely remove legacy groups.
Description description
Environment
Adobe Experience Manager (all versions)
Symptoms
After renaming a Product Profile in the Adobe Admin Console, two user groups with similar or identical names appear in AEM. For example:
- AEM-Production - Author - AEM Sites Content Managers (ID: AEM-Production - Author - AEM Sites Content Managers)
- AEM-Production - Author - AEM Sites Content Managers (ID: AEM Sites Content Managers - author - Program
This can cause confusion about which group is actively synchronized with the Admin Console and which is a legacy artifact.
Cause
Renaming a Product Profile in the Admin Console creates a new synchronized group in AEM with the updated name, rather than renaming the existing group. The old group remains in AEM as a legacy group until it’s manually removed.
Resolution resolution
Follow the steps below to resolve the issue.
-
In AEM, navigate to Tools
>Security>Groups. -
Locate both groups with similar names resulting from the Product Profile rename.
-
Compare the group IDs:
-
The group with an ID pattern referencing the current Product Profile name, program, and environment (For example: AEM Sites Content Managers - author - Program - Environment) is the actively synchronized group.
-
The group with the old Product Profile name as the ID is the legacy group and is no longer synchronized.
-
-
Review the legacy group for any custom permissions, ACLs, or user assignments. If any customizations exist, migrate them to the new group.
-
Once you have confirmed that the legacy group is unused and has no unique permissions or members, delete it from AEM using the Groups UI or repository tools.
-
To verify, ensure that users assigned to the current Product Profile in the Admin Console are present in the active group after their next login.