Using authentication/authorization with a Property realm there are some limitations.

• The CLI command will work only server local and not distribute a new or changed user/role across a cluster.
  • So the CLI command must be invoked on every server instance locally
• changes take no effect until reload
  • 'server aclcache flush' should do the job for the complete cluster! See ISPN docs
  • WebConsole login seems to refresh the login credentials, after this HR client will have it as well

The documentation does not have any hint about that and this should be clarified for the following chapters:

• ServerGuide 1.7 5.3
• SecurityGuide 2.3
• CLI 1.1