People Functions Plugin - getgroupsoftype

Interesting.

Is there any difference between the membership and privacy policies configured between the groups returned and not returned?

This is most likely a group security issue. In Appian, a non-admin user cannot know if another user is a member of a group unless they are a member of that group themselves. There is no security setting to get around this. The "public" security setting just means that any user can see that the group exists; it does not affect group membership visibility. The "privacy policy" setting is the one that affects membership visibility, and you'll notice even at the lowest setting ("low"), only members can see each other. I've gotten around this in the past in two different ways. The first is getting all the users for the groups in-process ahead of time since that can be run with admin privileges. The second is making the users who manage the group memberships admins of all groups they manage so that they can see the members without being members themselves.

HI andrewr865

In order for a basic user to see all the groups that a user has using getgroupsoftypeforuser function, all groups should have below
security settings. It is not necessary to be a member of the group to retrieve the group name of a different user if below settings are set in the group security.

Type :- Public
Privacy Policy : - Low

Any group that do not have this configuration will not be returned form the function is the user who execute is not a member/ admin of the group or user is not a sys admin.

Regards
Suresh

I've checked our environment and all of the groups have the following security settings configured: Public, Closed, Low. All the security is the same regardless of whether the group is being returned or not.

Hi sureshg57, I was running this function from a system administrator account so I would think that all the groups would be visible. Also the security settings on all the groups are set to Type: Public and Privacy: Low so that shouldn't be blocking anything.

I've been running this as an admin user and still returning only a subset of all the groups. The security setting is also set to "public" and "low" for all the groups and it doesn't look like there are any differences between settings for things being returned and not returned. In the actual process we grab the groups first with admin privileges so that's a good suggestion, it just appears to not be working in this instance.

Have you checked the system groups like All users/Application users (especially this group)/ designers/Database Administrators, the security of these varies.