How to include nested AD groups in campaign

Identity Security Cloud (ISC) ISC Discussion and Questions
,
6

As a demonstration, I set up two groups in my dev Active Directory domain:

  • flatGroup - this is a group that contains only two users: Luke Skywalker and Leia Organa
  • mixedGroup - this group contains two users: Yoda and Obi-Wan Kenobi; as well as one nested group, flatGroup

I create a certification campaign targeting mixedGroup specifically. As you can see, there is no reference anywhere in this campaign to the child entitlement, flatGroup.

image
image1047×456 14.4 KB

Here, we can see mixedGroup’s direct membership, as well as its recursive membership, as pulled via Powershell:
image

I’m not sure how @princess included the child entitlement alongside the identities in her campaign, but my guess is that it was done through a non-standard configuration on the Active Directory source?

1 Like