When setting up the UNIX security realm, you must specify all the users for primary and secondary groups in the UNIX groups file. You cannot rely on the primary group ID for the user.