This message was deleted.

Using AzureAD? This could help: https://jkindon.com/citrix-workspace-azure-ad-dsauthazureadnestedgroups/

Thanks for this @Matthias Eckerle - I had a look but my case is a bit different… We use SAML with Active Directory. Groups SIDs are synced and they work as long as the user belongs to the same domain.. it's only when you have foreign users added, they can't enumerate resources… and we have no nesting…. simple Security group and member users…