Sometimes we face the problem, that after putting a service user into a new rights group, this is not updated after the user tries to log in via API. If someone logs in via the GUI, the user rights are updated.
We have to check the behaviour with our own service user to be sure, how Artifactory behaves in this case.