Hi Deepak,
a filter with startsWith will not work. It applies to the group names, right? And the names are completely useless. I mean, there is no logic in them, to differentiate if it is cloud or on-premise group.
Can you elaborate little bit on second option “employing Group Membership filters to exclude on-premise groups”
Because only way it works is with “onPremisesSyncEnabled ne true” which is a advanced filter.
E.g. I have these two groups/entitlements…
They have same name. Just one is Cloud only, and second is On-premise synced. Both are “Security”
How could I filter only the cloud group? Without using the advanced filter?
Ivan.