Hello, I hope someone can point me in the right direction...I am working with existing criteria based FIM groups. These groups also have users which are 'manually managed' which are found in 'advanced view' in the 'extended attribute' tab. When attempting to modify a criteria based group in FIM ( an existing one) I get the "access denied" message even though I am the owner of the group! The strange thing is on the bottom left handside I see in red text a message stating: "*input required, dynamic group has static members" Does anyone have any idea why I am not allowed to modify the criteria for this FIM Group any longer and does this *input required have anything to do with anything? Thank you for your help.

If you remove the static members I expect it will let you continue. You can check from the denied request object what AuthZ workflow is causing the Access Denied, also.My Book - Active Directory, 4th Edition My Blog - www.briandesmond.com

Thanks Brian, I will give that a try and see what happens. Thanks for the quick reply. James

Thanks Brian that seemed to work! James