[RANGER-2940] Removing a user from a group is not reflected in Ranger

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 3.0.0, 2.2.0
• Component/s: Ranger, usersync
• Assignee: Sailaja Polavarapu
• Reporter: Sailaja Polavarapu
• Created: 05/Aug/20 01:56
• Updated: 08/Dec/21 08:07
• Resolved: 31/Aug/20 18:31

Description

Ranger usersync is configured to use AD/LDAP as sync source with incremental sync option enabled and "ranger.usersync.group.based.role.assignment.rules" with value ""&ROLE_SYS_ADMIN:g:<group_name>".

In this case,  even after removing a user from an ADMIN privilege group, ranger UI still shows an admin role for that user.