What is the impact of aggregation if the user exists in more than one directory?

• A. The application uses only the first directory's memberships.
• B. The application will aggregate or combine group memberships from all directories where the user appears.
• C. Memberships are synchronized to a single directory.
• D. Aggregation prevents cross-directory membership.

Answer: (B)

When a user exists in more than one directory, the system typically aggregates their group memberships across all directories. This means the user’s effective access is determined by the union of every group they’re a member of in any directory, so permissions reflect all affiliations. This approach is common in environments where identity data is distributed and you need a single, coherent access profile for the user. Using only the first directory’s memberships would miss other groups the user belongs to in other directories, while synchronizing memberships to a single directory would drop cross-directory relationships. Aggregation does not prevent cross-directory membership; it enables it by combining memberships from every directory where the user appears.