Symptoms

After upgrading on Friday, some users receiving USERXXX does not have rights to Start Process YYY
 

Diagnoses

Upgraded to 4.7 this past Friday, March 3. This morning we are receiving limited reports that users are receiving an error message when submitting forms (that cause a workflow to start) about start process rights. We use a "catch all" Active Directory group that has not changed since this process production release in October 2016. I assume something about the Identity Service is confused after the upgrade.

I have run the following SQL and it returns the user as valid, expireon value of 2017-03-06 12:04:24.070:
SELECT *
FROM MK2-Production].]Identity].]Identity]
WHERE FQN='K2:USER heGuy'

 

Resolution

Adding 'TranslateWithDirectoryServices=False' key to roleinit alleviated the issue.