Active Directory: Import groups from multiple OUs

[Community_User]

Originally posted on May 22 2020 at 14:55 UTC

Hi,

Is it possible to exclude certain OUs under the root or another OU while importing Active Directory Accounts and Groups using the AD connector?

For example, I have

OU=Company

OU=IT

OU=Finance

OU=HR

OU=Research Development

Is it possible to specify - import accounts/groups only from OU=IT and OU=HR and exclude OU=Finance and OU=Research Development?

Thanks,
Suparna

[Community_User · Accepted solution]

Originally posted on May 22 2020 at 17:11 UTC

Hi Suparna,

Active directory does not support advanced filters specifically based on OU and DN/distinguishedName constraints.

You could get a single object as OU itself or an object based on a DN filter but it will never return you user/group list together with OU filters. Thus, this requirement cannot be fulfilled via filters based on OU.

Like we discussed, it is only possible if you have any specific attribute which could be differentiator across those OU objects (for example, departmentName attribute that could provide info on whether it should be imported or not), in which case we could still do it via ObjectFilter.

It is possible to raise an enhancement request that will enable the product team to search for alternate solutions to implement this, but will be taken up based on priority post v6 release.

[Community_User]

Originally posted on May 26 2020 at 15:13 UTC

Thank you very much, Divya! I will raise an enhancement request for this.

Thanks,
Suparna