Could not find
For Active Directory (AD) users to be able to access the Compliance Accelerator (CA) Client to conduct activities such as searching and reviewing, they must have an entry added to the Employee tab that is synchronized with their AD account. The information used in the synchronization process includes the SID, Display Name and the Login ID. When an Employee's Active Directory (AD) login ID is changed, the AD Synchronization process looks for a match to the information in the CA Customer database's tblPrincipal table in the PrincipalLogin column. When the AD account login ID matching PrincipalLogin no longer exists in AD, a synchronization error is thrown into the SyncError column of the tblPrincipal table for that user. The error thrown is similar to the above error and contains the domain and ID noted in the error.
The error should stop automatically after 30 failed synchronization attempts within 30 days by default. These 30 / 30 settings can be adjusted through the configuration settings of the Profile Synchronization section of the Configuration tab's Settings sub-tab.
With the change in the AD UserID, any attempt to log onto the CA Client using the changed AD UserID will fail due to a mismatch in that ID with the PrincipalLogin column entry for the user in the tblPrincipal table. In order for the changed AD UserID to be able to access the CA Client, it must be granted permissions to match those if the account's previous UserID. This granting of permissions should be done by creating a new Employee tab entry for the user's new UserID and assigning Roles to match those of the user's previous UserID.
If creating a new Employee tab entry and assigning it the Roles used by the user's previous UserID fails, contact Veritas Support Services for assistance.