bitwarden/help
1
0
Fork 0
mirror of https://github.com/bitwarden/help synced 2025-12-06 00:03:30 +00:00
Code Issues Releases Wiki Activity

Information about filtering Azure AD users based on group membership (#37)

Browse Source 
* Information about filtering Azure AD users based on group membership.

https://github.com/bitwarden/directory-connector/pull/9

* Update user-group-filters.md
This commit is contained in:
Jan Hajek
2018-10-26 14:19:13 +02:00
committed by Kyle Spearrin
parent 63ca0e2825
commit 9bb216f52f
1 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
_articles/directory-connector/user-group-filters.md
View File

@@ -65,7 +65,7 @@ Users that are a member of the 'Heroes' group, either directly or via nesting
## Azure Active Directory
The Microsoft Graph API does not provide a way to filter groups and users directly, however, you can use our custom filtering syntax that allows you to exclude or include a comma separated list of group names and user emails.
The Microsoft Graph API does not provide a way to filter groups and users directly, however, you can use our custom filtering syntax that allows you to exclude or include a comma separated list of group names, user emails, or users based on their group membership.
### Examples
@@ -85,6 +85,8 @@ exclude:Group C,Developers,Some Other Group
#### Users
You can include/exclude users directly by using `include` or `exclude` keywords like below:
```
include:joe@company.com,bill@company.com,tom@company.com
```
@@ -93,6 +95,16 @@ include:joe@company.com,bill@company.com,tom@company.com
exclude:joe@company.com
```
Alternatively, you can filter users based on their Azure AD group membership by using `includeGroup` or `excludeGroup` keywords. You must obtain the Azure AD group ID and include it with the keyword. You can get the group's ID in the [Azure Portal](https://portal.azure.com) or through [Azure AD PowerShell](https://docs.microsoft.com/en-us/powershell/module/azuread/get-azureadgroup?view=azureadps-2.0).
```
includeGroup:97b9ff2a-7d4f-463d-a925-efb1677fd40d,b389c339-8c13-4c1a-8ac1-4fde56d9f70f
```
```
excludeGroup:97b9ff2a-7d4f-463d-a925-efb1677fd40d
```
## G Suite
### Groups
@@ -189,4 +201,4 @@ Only the Okta `filter` search (notice the `|` prefix that is required):
```
|profile.lastName eq "Smith"
```
```