When you make changes to rights, roles, or role assignments, these changes take effect on managed computers at the next cache update interval, as set by the adclient.cache.expires parameter or the “Set object expiration” group policy. The default update interval is 10 minutes. If you want changes to take place immediately, you can flush the cache on individual computers.
To flush the cache and update authorization changes:
- Log on or switch to the root user on the managed computer.
Run the adflush command to clear the agent cache. For example: