hi, I've set up self-service DG management (enabled the default MPRs) and it all seems to be working correctly except that when the owner of a group isn't administrator. So logged in as a user who isn't administrator who owns a group that has pending join requests, when I click on the approve requests the originator field is empty and when I click into the request the requestor field is also empty. The request can be approved and the user will be correctly added to the group, the owner just can't see who the requestor is. I've checked the enabled MPRs. This one seemed relevant Request management: Request creators can read their request resource. But it's enabled and I can't see any others that might be causing this behaviour. Any suggestions?

When you view the same request as an administrator, is the requestor field still empty?Need realtime FIM synchronization? check out the new http://www.traxionsolutions.com/imsequencer that supports FIM 2010 and Omada Identity Manager real time synchronization!

Check the principal set. It might be all active people and you might not have people in there. You need permissions to view the ObjectID and DisplayName (and maybe the Locale) of the target of the reference to be able to render it in the portal.

I created the request then looked at it as administrator before I approved it as the group owner and the requestor appeared as Forefront Identity Manager Service Account on the General Tab. Under the Detailed Content tab, though, the Requestor appears as a reference to the user who made the request. The Applied Policy tab is empty. Is it meant to show the two different requestors?

Weird. I can't visualise. Can you post screenshots?