From 33d75bed37bc6b071dc1c4fbe5d63bb4eb0f4d0d Mon Sep 17 00:00:00 2001 From: Kyle Spearrin Date: Wed, 24 May 2017 22:37:15 -0400 Subject: [PATCH] gsuite and azure filters --- .../directory-connector/user-group-filters.md | 68 ++++++++++++++++++- 1 file changed, 66 insertions(+), 2 deletions(-) diff --git a/_articles/directory-connector/user-group-filters.md b/_articles/directory-connector/user-group-filters.md index 34a6df26..e58429b7 100644 --- a/_articles/directory-connector/user-group-filters.md +++ b/_articles/directory-connector/user-group-filters.md @@ -2,8 +2,72 @@ layout: article title: Configuring user and group sync filters categories: [Organizations] -featured: true +featured: false popular: false -hidden: true +hidden: false tags: [] --- + +You can configure the bitwarden Directory Connector to use filters to limit the users and/or groups that are processed for syncing to your bitwarden organization. + +The syntax for filtering is different for each directory server type and is covered in detail below. + +## Active Directory and Other LDAP Directories + +Coming soon... + +## Azure Active Directory + +The Microsoft Graph API provides advanced filtering capabilities through the `$filter` parameter using OData syntax. This parameter is exposed to you in both the user and group filters of the Directory Connector. + +Read more about the `$filter` parameter with OData syntax here: + +### Example + +``` +startswith(displayName,'J') +``` + +## G Suite + +### Groups + +The G Suite APIs do not provide a way to filter groups directly, however, you can use our custom filtering syntax that allows you to exclude or include a comma separated list of group names. + +#### Examples + +``` +include:Group A,Sales People,My Other Group +``` + +``` +exclude:Group C,Developers,Some Other Group +``` + +### Users + +We provide the same custom filtering syntax that allows you to exclude or include a comma separated list of user emails. + +Additionally, the G Suite APIs provide limited filtering capabilities for users that are exposed to you. Read more about filtering with the `query` parameter here: + +You can combine both of these filtering options by concatenating the two strings with a pipe (`|`); + +#### Examples + +Only the include/exclude filter: + +``` +include:joe@company.com,bill@company.com,tom@company.com +``` + +An include/exclude filter + a G Suite `query` search: + +``` +exclude:john@company.com,bill@company.com|orgName=Engineering orgTitle:Manager +``` + +Only the G Suite `query` search: + +``` +|orgName=Engineering orgTitle:Manager +```