ODMAD: User Profiles Not Mapped Due to Blacklisted SIDs (4382802)

When running Device ReACL, the operation fails even though:

• The device appears under “Ready Devices”
• The ODM AD Agent is installed on the device
• A Provisioning Package (PPKG) is properly assigned via profile
• Manual installation of the PPKG completes successfully

The issue occurs because the affected user profiles are associated with Security Identifiers (SIDs) that are included in the Blacklist SIDs configuration  within the Device ReACL Profile. 

When a SID is present in this exclusion list:

• ODM does not process or map the user profile
• The ReACL operation skips these users entirely
• This behavior is by design, even if:
  • The device is in a Ready state
  • The ODM AD Agent is installed
  • The PPKG is correctly configured

As a result, the system detects the profiles as “User Profiles without mappings”, and the ReACL operation fails or does not process those users.

To resolve the issue, remove the affected SIDs from the exclusion list: 

1. Navigate to the Device ReACL Profile configuration.
2. Locate the section:
   “Exclude these Security Identifiers from processing”
3. Identify the affected SIDs listed in this section.
4. Remove the corresponding SIDs from the exclusion list.
5. Save the changes
6. Re-run the ReACL operation on the device.

Once the SIDs are removed from the exclusion list, the user profiles will be processed correctly, and the ReACL operation should complete successfully.