Changes in User Group and Product Profile Synchronization changes-in-user-group-and-product-profile-synchronization

Whenever a user logs into AEM as a Cloud Service or an access token is used, Adobe Admin Console user groups, product profiles, and product profile services are synchronized into the AEM repository as groups.

Starting with AEM Maintenance Release 19149, the group synchronization behavior is changed to reduce UI clutter and optimize performance. Specifically, the user group membership of the following two categories of AEM groups will no longer be synchronized:

  1. AEM Groups with Suffix GROUP_NAME_SUFFIX. These groups do not appear in the Adobe Developer Console, but appear in the AEM Group Management screen, as shown below. In the unlikely case that your AEM application references these groups, make sure to reference Adobe Admin Console user groups without that suffix instead.

    Removed groups 1

  2. AEM groups associated with Adobe Admin Console product profiles unrelated to the specific environment. This may include product profiles that are:

    • related to other Adobe products
    • related to other AEM programs
    • related to other AEM environments in the same AEM program
    • related to Cloud Manager (for example, Business Owner - Cloud Service)

    For example, in the image below, there are many rows with the pattern AEM Administrators-<suffix> or AEM Users-<suffix> where the suffix is not related to the current environment.

    Removed groups 2

You can check which suffix is related to the current environment by selecting Manage Access - Author Profiles (or Publish Profiles) in the environment’s action menu in Cloud Manager.

Check suffixes

This will navigate to the Adobe Admin Console, as depicted in the screenshot below. Note that the <suffix> may be either a random set of characters or rather the tier, and program and environment ids (for example, author - Program 12345 - Environment 45678).

Suffixes in the Admin Console

In the unlikely case that your AEM application references a group that will no longer appear in AEM, make sure to instead either use i) a Product Profile from the right AEM instance or ii) an Adobe Admin Console user group.

The user’s group memberships are synchronized when they logs into the environment, and they are removed from groups not related to the current environment. The groups themselves remain and include users who have not logged in since the feature was enabled.

recommendation-more-help
fbcff2a9-b6fe-4574-b04a-21e75df764ab