What rights does Deltona have when he logs onto the Orion Web Console using passthrough auth?
Is there any privilege fallback built in to Orion in this case? What if the user is accidentally added to the other group as well.
Say Deltona should only have read only rights, what should be done in Orion, not on the AD. This scenario should be considered as is. In other words, as designed.
No errors have been made when creating the user in the group(s).
The way i see it is you wouldn't be able to control or hinder Deltona from logging in even if you create his account as a standalone Windows AD account in Orion and change his access rights.
