DropBox Group Push Error: "All Users must be an active Team members"
Last Updated:
Overview
Dropbox group push flow fails with the following error visible in the Okta dashboard:
Changes to the Group push mapping for the group "Group Name" could not take effect due to error: Error while updating user group membership for group Recruiting - Dropbox: Errors during execution: Error executing updateGroup: All Users must be an active Team members. Error Code: null
Applies To
- Dropbox
- Push Groups
- Provisioning
- Error
Solution
Most of the time, one of the pushed users is not "Active" on the Dropbox side. The error returned by Dropbox has no specifics to indicate who is the problematic user. Make sure all members of the affected Push Group are marked as "Active" within the Dropbox Administration console. If they are active check the rest of this article.
Troubleshooting steps
- Add the users one by one to the push group until a user breaks the group push.
- Get the application user external ID value for that specific user in Okta by clicking on the pencil icon from the Assignment tab of the DropBox integration.
-
Use the Dropbox API to query that user team member ID (dbmid:External ID).
-
The API response should look like this:
{"status":200,"headers":{},"result": [{".tag":"id_not_found","id_not_found":"dbmid:External ID"}]}
-
The user's team_member_id is invalid in Dropbox, but at the same time is associated to an Okta user.
-
This Okta API can be used to retrieve the external ID's of all users assigned to Dropbox in Okta and then compare that against a full export from Dropbox to identify where the ID's do not match.
-
Remove the affected users from the Dropbox integration, add them back, and push the group again.
Please contact Dropbox support for more details if needed.
