LDAP Group Resource Assign - not working - APM 11.6 HF6

I would suggest using the sessiondump command or viewing the session report to make sure those variables are being set the way you expect. There is nothing wrong with the TCL expression you have written, so you need to verify those variables contain the values you expect them to.