RightsDescriptorIncomplete Field
this flag informs user that the rights are not complete because information about group role or the member is not available at this moment.
Caused by absence of the information at the moment when Rights descriptor is taken from cache:
1. (misconfiguration) Group does not have definition for the member role or definition is malformed
2. (misconfiguration) Member role definition is malformed
3. (race conditions) In very rare cases it may happen if transaction is not fully applied to the cache.
4. stale
Group/
GroupMember/
DN snapshots are used to obtain rights configuration