When a user launches the Console they may get the following error message:
Authorization Failed: ControlUp Server was unable to validate the group membership of your user account. Please make sure that the security group configured for ControlUp access in Active Directory is in place or contact email@example.com for further assistance.
First, check the troubleshooting steps in the article: Your Windows user is not authorized to use ControlUp (On-Premises Login Issue)
If you have checked all these steps and you're still unable to log in to the Console, check the User Management log located on the ControlUp On-Premises server in the following location:
"C:\Program Files\Smart-X\ControlUp Server\WebApps\UserManagementService\7_WS\UserManagementService.log"
Check the errors at the bottom of the log. If you see the group listed: 'ControlUp_PrivateCloudMembers' then the issue is that your service account is unable to read the contents of the file: "C:\Program Files\Smart-X\ControlUp Server\Server Settings\ControlUpServerSettings.xml"
To resolve, make certain that your ControlUp service account has Read & Execute permissions to the ControlUpServerSetting.xml that defines the ControlUp User group, then perform an IISRESET.