How did you grant access to the user before? Entitlment is done based on AD group or directly to the AD user?
