# Advanced group filters not applied

**URL:** <https://developer.sailpoint.com/discuss/t/advanced-group-filters-not-applied/146078>\
**Category:** IIQ Discussion and Questions\
**Tags:** identityiq\
**Created:** [June 19, 2025, 12:18pm UTC](https://developer.sailpoint.com/discuss/t/advanced-group-filters-not-applied/146078 "2025-06-19T12:18:34Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![falin](https://avatars.discourse-cdn.com/v4/letter/f/a87d85/32.png) [@falin](https://developer.sailpoint.com/discuss/u/falin)\
**Post date:** [June 19, 2025, 12:18pm UTC](https://developer.sailpoint.com/discuss/t/advanced-group-filters-not-applied/146078/1 "2025-06-19T12:18:34Z")

</div>

Hi,

We have recently looked into aggregating the PIM object types from Azure AD and found that a lot of our Azure applications had not followed our upgrades to 8.4p2 to be able to aggregate those type of object types. Therefore I created a new application in 8.4p2 and could successfully aggregate all new object types. We have also recently started to apply filters for our group aggregation such as image 1, (dirSyncEnabled ne true) and applied the advanced group filters to not read in all groups in Azure.

My issue is that I receive the error message seen in image 2 when I run account group aggregation with the filter applied for the application. All objects except the group type are aggregated. Has any one else experienced this or has a suggestion what I could do to solve it?

## Which IIQ version are you inquiring about?

8.4p2

## Please share any images or screenshots, if relevant.

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/8/0/803aa091466158c7bf9a96c4000df62eb1b35fbc.png)

## Share all details about your problem, including any error messages you may have received.

Exception during aggregation of Object Type Group on Application Azure AD PIM Test. Reason: sailpoint.connector.ConnectorException: Exception occurred in Iterate Objects. Error message - sailpoint.connector.ConnectorException: Exception occurred in processReadRequest. Error - Response Code - 400 Error - 400 Filter operator ‘NotEqualsMatch’ is not supported.

---

<div class="post-metadata">

**Author:** ![pattabhi](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/pattabhi/32/25700_2.png) [@pattabhi](https://developer.sailpoint.com/discuss/u/pattabhi)\
**Post date:** [June 19, 2025, 2:28pm UTC](https://developer.sailpoint.com/discuss/t/advanced-group-filters-not-applied/146078/2 "2025-06-19T14:28:46Z")

</div>

Hi @falin

Welcome to the SailPoint Developer Community!

Please check below topics solution, I believe this will resolve your error.

[AAD cloud source groups - IdentityIQ (IIQ) / IIQ Discussion and Questions - SailPoint Developer Community](https://developer.sailpoint.com/discuss/t/aad-cloud-source-groups/72884)

Another article, same answer already provided by @Arun-Kumar

[Azure AD Source - skipping entitlements that are synced from on prem - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community](https://developer.sailpoint.com/discuss/t/azure-ad-source-skipping-entitlements-that-are-synced-from-on-prem/6350)

---

<div class="post-metadata">

**Author:** ![Arun-Kumar](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/arun-kumar/32/15128_2.png) [@Arun-Kumar](https://developer.sailpoint.com/discuss/u/Arun-Kumar)\
**Post date:** [June 19, 2025, 2:34pm UTC](https://developer.sailpoint.com/discuss/t/advanced-group-filters-not-applied/146078/3 "2025-06-19T14:34:51Z")

</div>

Hi @falin ,

Ensure that the **owners** attribute is removed from the group schema to enable support for the **ne** query filter.

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/8/b/8b72150d2b9ffc7ae88fd7d9e366db87118a8baf.png)

---

<div class="post-metadata">

**Author:** ![falin](https://avatars.discourse-cdn.com/v4/letter/f/a87d85/32.png) [@falin](https://developer.sailpoint.com/discuss/u/falin)\
**Post date:** [June 23, 2025, 6:37am UTC](https://developer.sailpoint.com/discuss/t/advanced-group-filters-not-applied/146078/4 "2025-06-23T06:37:51Z")

</div>

Thank you @Arun-Kumar for the solution, missed that in the documenation. And thank you @pattabhi for the additional links!

---

<div class="post-metadata">

**Author:** ![eberteo](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/eberteo/32/26553_2.png) [@eberteo](https://developer.sailpoint.com/discuss/u/eberteo)\
**Post date:** [June 30, 2025, 12:38am UTC](https://developer.sailpoint.com/discuss/t/advanced-group-filters-not-applied/146078/5 "2025-06-30T00:38:04Z")

</div>

Hello @falin, welcome to the Community!

As @pattabhi has mentioned the response to your question has been solved in the following post:

[Azure AD Source - skipping entitlements that are synced from on prem - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community](https://developer.sailpoint.com/discuss/t/azure-ad-source-skipping-entitlements-that-are-synced-from-on-prem/6350)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [August 29, 2025, 12:38am UTC](https://developer.sailpoint.com/discuss/t/advanced-group-filters-not-applied/146078/6 "2025-08-29T00:38:10Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
