Organization Admin is able to access Users and Organizations via URL, but does not have any way to access Users and Organization through the UI

• Type: Bug
• Status: Closed
• Resolution: Won't Fix
• Affects Version/s: 7.0.0 DXP GA1, 7.0.0 DXP FP12, 7.0.X EE
• Fix Version/s: None
• Component/s: User Management, User Management > Users & Organizations
• Labels:
  • QA-AUTOMATION
  • QA-V
• Fix Priority: 4

Issue
When we grant an Organization Administrator role to a user, they are able to access the Users and Organization through a URL such as http://localhost:8080/group/control_panel/manage?p_p_id=com_liferay_users_admin_web_portlet_UsersAdminPortlet, but there is no way in the UI to access Users and Organization.

Steps to Reproduce

1. Start a clean Liferay DXP + DE-12 environment
2. Sign in as [e-mail]
3. Open up the Product Menu > Control Panel > Users > Users and Organization > Organizations tab > and add an Organization called "NewOrg"
4. Open up Control Panel > Users and create new user, then assign it to the "NewOrg" organization
5. Grant the new user Organization Administrator (Organization Role) for "NewOrg"
6. Open a separate browser and login with the new user
7. Open up the Product Menu, and assert that Control Panel is not showing (i.e. there's no way to access Users and Organization through the Product Menu)
8. Go back to the original browser where you are logged in as [e-mail], then copy the URL of Users and Organizations (e.g. http://localhost:8080/group/control_panel/manage?p_p_id=com_liferay_users_admin_web_portlet_UsersAdminPortlet)
9. In the browser where we are logged in with the new Organization Administrator user, copy and paste the link from the previous step

Acutal Result
The Organization Administrator is able to view the Users and Organizations panel through the direct URL, but does not have a way to access it through the UI.

Expected Result
Either the Organization Administrator has access through the UI through the Product Menu > Control Panel > Users > Users and Organizations, OR they should not be able to access Users and Organizations through the URL (e.g. http://localhost:8080/group/control_panel/manage?p_p_id=com_liferay_users_admin_web_portlet_UsersAdminPortlet)