Saviynt Forums

hirenp · ‎09/27/2022

Hi folks,

I want to know if in ADSI connector there is a way to filter out group objects nested when doing entitlement recon from ActiveDirectory. The goal is to just bring user objects and not any group objects as members.

rushikeshvartak · ‎09/28/2022

Click on advanced config & add required condition

Refer documentation https://docs.saviyntcloud.com/bundle/ADSI-v2021x/page/Content/Import-Recommendations.htm#top

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

hirenp · ‎09/28/2022

@rushikeshvartak That doesn't look like criteria to filter nested groups but how to query AD with some complex filter criteria

rushikeshvartak · ‎09/28/2022

You can try advanceGroupFilter

https://saviynt.freshdesk.com/support/solutions/articles/43000615764-active-directory-ad-connector-g...

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

hirenp · ‎09/28/2022

@rushikeshvartak How would advanceGroupFileter help here as the nested membership could be in hundreds of groups?

Saviynt Forums

Filter group objects from entitlement recon