# Entitlement Aggregation

**URL:** <https://developer.sailpoint.com/discuss/t/entitlement-aggregation/101327>\
**Category:** SHF Discussion and Questions\
**Tags:** entitlements, aggregation, identity-security-cloud\
**Created:** [February 18, 2025, 10:21pm UTC](https://developer.sailpoint.com/discuss/t/entitlement-aggregation/101327 "2025-02-18T22:21:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ssong](https://avatars.discourse-cdn.com/v4/letter/s/c6cbf5/32.png) [@ssong](https://developer.sailpoint.com/discuss/u/ssong)\
**Post date:** [February 18, 2025, 10:21pm UTC](https://developer.sailpoint.com/discuss/t/entitlement-aggregation/101327/1 "2025-02-18T22:21:33Z")

</div>

How you filter out dynamic groups from aggregating into SailPoint from an Entra source connector?

---

<div class="post-metadata">

**Author:** ![Abhinov7](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/abhinov7/32/13253_2.png) [@Abhinov7](https://developer.sailpoint.com/discuss/u/Abhinov7)\
**Post date:** [February 19, 2025, 4:53am UTC](https://developer.sailpoint.com/discuss/t/entitlement-aggregation/101327/2 "2025-02-19T04:53:05Z")

</div>

Hi,

Please use below documentation.

> **[IdentityNow Account Filtering during Account Aggregation](https://community.sailpoint.com/t5/IdentityNow-Wiki/IdentityNow-Account-Filtering-during-Account-Aggregation/ta-p/142873)**
>
> Overview Often there is a need to filter accounts on a source during an account aggregation process. While some source connectors offer an ability to filter accounts natively, other source connectors may not, usually due to technical limitations -...

You can search for group filtering.

-Abhinov

---

<div class="post-metadata">

**Author:** ![jesvin90](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jesvin90/32/5301_2.png) [@jesvin90](https://developer.sailpoint.com/discuss/u/jesvin90)\
**Post date:** [February 19, 2025, 8:14am UTC](https://developer.sailpoint.com/discuss/t/entitlement-aggregation/101327/3 "2025-02-19T08:14:55Z")

</div>

Hi @ssong,

You can try using the below filter in the group and group membership fields and see if it works for you.

`NOT (groupTypes/any(s:s eq 'DynamicMembership'))`

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/2/5/25d075017d3aa64159c4cf79fc03f5585df51416.png)

Take a look at [this](https://documentation.sailpoint.com/connectors/microsoft/entra_id/help/integrating_entra_id/aggregation_settings.html) documentation for more details.

Also, make sure to test this in postman to make sure that you do get the right groups:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/8/2/820b642322f8a715d4cae502c817e4fdc4394d9d.png)

Keep the below point in mind, incase the account aggregation brings in extra groups:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/7/4/746af8f2474c10f98bb0e3c4fcf549b6c8bbee01.png)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [April 20, 2025, 8:15am UTC](https://developer.sailpoint.com/discuss/t/entitlement-aggregation/101327/4 "2025-04-20T08:15:05Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.