If you create a new LDAP user account, and the account does not belong to a group account that is mapped to Crystal Enterprise, add it to Crystal Enterprise. For more information, see Configuring LDAP authentication and mapping LDAP accounts.
If you create a new LDAP group account, and the group account does not belong to a group account that is mapped to Crystal Enterprise, add it to Crystal Enterprise. For more information, see Configuring LDAP authentication and mapping LDAP accounts.
If you disable an LDAP user account, and that LDAP user account is mapped to Crystal Enterprise, the user will not be able to log on to Crystal Enterprise. However, if the user also has an account that uses Enterprise authentication, the user can still access Crystal Enterprise using that account.
Disabling an LDAP group account
If you disable an LDAP group account, and that LDAP group account is mapped to Crystal Enterprise, the users who belong to that group will not be able to log on to Crystal Enterprise. However, if the user also has an account that uses Enterprise authentication, the user can still access Crystal Enterprise using that account.