Group Aggregation Filter

[chandramohan27 (Chandra Mohan S)]

Hi,

I added a group filter to not bring an Azure AD entitlement named :: test_group. But the group gets aggregated via account aggregation. Any suggestion on how to filter the group.

[amit_1140 (Amit Kumar)]

@chandramohan27 -

Could you try filtering the group using display name for discarding the group to come as part of group aggregation-

Also, Select the Group Membership Filters to define the scope of the group memberships included in account aggregation. These filters apply during the account aggregation and are only applicable to memberships belonging to objectType = group. These are only applicable to the Security, Office 365, Mail Enabled Security, and Distributed type of group memberships. For more information on filters, refer to the Microsoft documentation.

Note
You can provide filters as mentioned in the examples below, and the connector ensures the formation of an appropriate advanced filter query. This field supports advanced filter queries such as endsWith, NOT, and NE.

For example,

• To aggregate only group memberships with group display name starting with ‘A’, use startswith(displayName,'A').

• To aggregate only group memberships with groups not belonging to on-premises AD (or to only include cloud group memberships), use onPremisesSyncEnabled ne true.

• To exclude dynamic group memberships during account aggregation , use NOT groupTypes/any(c:c eq 'DynamicMembership')

For more info refer the doc - Aggregation, Filter, and Partitioning Settings