Excluding AzureAD Groups of membership type is dynamic and synced from On-premise AD

[sreehariv]

Hello Team,

We have a requirement to filter the Azure AD Groups during recon (not to import in to saviynt).

We have added the below filters and tried but it doesn't workout

{
"group_filter": "NOT(groupTypes/any(i:i eq 'DynamicMembership')) OR onPremisesSyncEnabled ne 'true'"
}

Groups are not filtered. 

We have tried this in postman using Microsoft graph api and it says

NOT is not a supported type in filter clause.

Can you please suggest us how we can  achieve this.

Thanks

Sreehari

[RakeshMG]

Please try following sample :

group_filter":"startswith(displayname,'AZ')&$count=true"

Also you can create a custom_access import trigger for Azure AD and put the import config as needed.

If you need only AADGroups to be pulled in, you can put something like below.

{
"importEntTypes": {
"AADGroup": {}
},
"excludeEntTypes": {
"Team": {},
"Channel": {},
"MemberPermission": {},
"GuestPermission": {},
"ApplicationInstance": {},
"InterAppOauthPermissions": {},
"DirectoryRole": {},
"Subscription": {},
"Application": {},
"DirectoryRoleMember": {},
"SKU": {},
"ServicePlans": {}
}
}