AEM as a Cloud Service: Project Team Owner cannot view or add other users
This article explains how to resolve the issue where users with the Owner role in an AEM as a Cloud Service Project Team cannot view or add other users, typically due to insufficient read permissions on user and group directories.
Description description
Environment
- Adobe Experience Manager as a Cloud Service (AEMaaCS)
- Author instance (all versions)
Issue/Symptoms
Users assigned the Owner role in an Adobe Experience Manager as a Cloud Service (AEMaaCS) Project Team cannot see or add other users to the Project Team. When they access the Project Team interface, only their own name is visible, and the options to manage other team members are unavailable.
- Project Team Owners can see only their own profiles in the Project Team interface.
- Project Team Owners cannot view or add other users to the Project Team.
- The issue affects all users assigned the
Ownerrole in the affected project and is not limited to a single account.
Cause
The Owner role in AEM Projects is a project-specific designation and does not automatically grant global read permissions on /home/users or /home/groups. Without these permissions, users cannot view or add other users to the Project Team.
Resolution resolution
Follow the steps below to resolve the issue:
-
Log in to the AEM Author instance with an account that has administrative privileges.
-
Open the Permissions console (Tools
>Security>Permissions) or use your preferred access control management tool. -
Locate the
projects-usersgroup. -
Review the permissions assigned to the following paths:
/home/users/home/groups
-
If the
projects-usersgroup does not havejcr:readaccess to these paths, grantjcr:readpermission on both paths. -
Save the changes.
-
Have affected users log out and log back in to the AEM Author instance to refresh their access rights.
-
Verify that Project Team Owners can view and add other users in the Project Team interface.