How to Filter out Groups in Azure AD Connector?

[bhadelbikram90 (Bikram Bhadel)]

Can we just aggregate a single security group from Azure AD connector? My requirement is to bring single AD group and its members.

[ismaelmoreno1 (Ismael Moreno)]

Hi @bhadelbikram90

Coud you try following condition in filter group configuration?

securityEnabled eq true

it is possible also filter by Displayname, where param nameGroup is the displayName of the group

displayName eq nameGroup

You can see more details about filter aggretion in the following link: Aggregation Settings (sailpoint.com)

Also, you can get more information about query capabilities on Azure AD in the following link: Advanced query capabilities on Azure AD objects - Microsoft Graph | Microsoft Learn

[neeme_vool]

It is possible to do it also with Rule, if you have the need to load different single groups.
Like:

import sailpoint.object.Application;
import sailpoint.object.ResourceObject;
import sailpoint.api.Aggregator;
import sailpoint.connector.Connector;

Application application = context.getObjectByName(Application.class, appName);
Connector appConnector = sailpoint.connector.ConnectorFactory.getConnector(application, null);
ResourceObject rObj = (ResourceObject) appConnector.getObject("group", groupName, null);
Attributes argMap = new Attributes();
argMap.put("accountGroupRefreshRule", preRefreshRule);
argMap.put("aggregationType", "group");
argMap.put("applications", application.getName());
Aggregator agg = new Aggregator(context, argMap);
agg.aggregateGroup(application, rObj);