# Group Aggregation Filter

**URL:** <https://developer.sailpoint.com/discuss/t/group-aggregation-filter/187491>\
**Category:** SHF Discussion and Questions\
**Tags:** aggregation, sailpoint-identity-security\
**Created:** [November 5, 2025, 6:49am UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-filter/187491 "2025-11-05T06:49:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![chandramohan27](https://avatars.discourse-cdn.com/v4/letter/c/51bf81/32.png) [@chandramohan27](https://developer.sailpoint.com/discuss/u/chandramohan27)\
**Post date:** [November 5, 2025, 6:49am UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-filter/187491/1 "2025-11-05T06:49:24Z")

</div>

Hi,

I added a group filter to not bring an Azure AD entitlement named :: test\_group. But the group gets aggregated via account aggregation. Any suggestion on how to filter the group.

---

<div class="post-metadata">

**Author:** ![amit\_1140](https://avatars.discourse-cdn.com/v4/letter/a/48db29/32.png) [@amit\_1140](https://developer.sailpoint.com/discuss/u/amit_1140)\
**Post date:** [November 5, 2025, 7:01am UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-filter/187491/2 "2025-11-05T07:01:05Z")

</div>

@chandramohan27 -

Could you try filtering the group using display name for discarding the group to come as part of group aggregation-

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/b/c/bcef2076575c6dca4ef7616875e0419ce3cbb108.png)

Also, Select the **Group Membership Filters** to define the scope of the group memberships included in account aggregation. These filters apply during the account aggregation and are only applicable to memberships belonging to `objectType = group`. These are only applicable to the Security, Office 365, Mail Enabled Security, and Distributed type of group memberships. For more information on filters, refer to the [Microsoft documentation](https://learn.microsoft.com/en-us/graph/query-parameters?tabs=http).

**Note**  
You can provide filters as mentioned in the examples below, and the connector ensures the formation of an appropriate advanced filter query. This field supports advanced filter queries such as `endsWith`, `NOT`, and `NE`.

For example,

- To aggregate only group memberships with group display name starting with ‘A’, use `startswith(displayName,'A')`.

- To aggregate only group memberships with groups not belonging to on-premises AD (or to only include cloud group memberships), use `onPremisesSyncEnabled ne true`.

- To exclude dynamic group memberships during account aggregation , use `NOT groupTypes/any(c:c eq 'DynamicMembership')`

For more info refer the doc - [Aggregation, Filter, and Partitioning Settings](https://documentation.sailpoint.com/connectors/microsoft/entra_id/help/integrating_entra_id/aggregation_settings.html)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [January 4, 2026, 7:01am UTC](https://developer.sailpoint.com/discuss/t/group-aggregation-filter/187491/3 "2026-01-04T07:01:33Z")

</div>

Closed on January 4, 2026, 7:01am UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.