Can I build a dynamic group based on part of a value contained in 'MemberOf' user attribute ?

Question

Hi, 
 Can I build a dynamic group based on part of a value contained in 'MemberOf' user attribute ? 
 I have several groups with the same pattern but in different OU, they all have in their name the string 'RBA-CU-JMF'. 
 I tried to make a dynamic group with the following parameters: 
 Object Class: User 
 Object Property: Member Of 
 Condition: Contains 
 Value: RBA-CU-JMF 
 But the search remains empty. 
 If I replace the condition by 'Is Exactly' and replace ' RBA-CU-JMF ' by the full DN it works but then I have to find each group with this pattern and specify each DN. It's not what I need since new groups with this pattern can be created later and their members need to be included in this dynamic group. 
 Have you experienced this? 
 Regards, 
 Nicolas

JohnnyQuest · Accepted Answer

I looked at this again - you can get what you need just by using an "include group members" membership rule on your dynamic group. When you go to set it up and you are asked to select the group(s) whose members you want, just type the prefix (Example: ABC) and when you hit "Check Names" all the groups with that prefix will show up. You can just select the ones you want or take the whole list. Either way, you won't have to repeatedly go hunting for them individually.

Endpoint Privilege Management

Can I build a dynamic group based on part of a value contained in 'MemberOf' user attribute ?

Top Replies