Forum Discussion
PeterJ_Inobits
Oct 20, 2020Iron Contributor
Dynamic Security Groups based on the onpremisesDistinguishedName attribute
Hi to the community Got an interesting question. I see that you can create dynamic security groups based on a large number of attributes including onpremisessecurityidentifier, I can see some use ca...
VasilMichev
Oct 20, 2020MVP
The attribute itself is synced/exposed as "onPremisesDistinguishedName", however leveraging that for Dynamic group rules is not possible afaik.
PeterJ_Inobits
Oct 22, 2020Iron Contributor
Hi Vasil
I had this confirmed by another source.... It's annoying because that ability would have eased a particular issue in where the accuracy of data in AD is questionable but the org has dept/division based OU structure..
I had this confirmed by another source.... It's annoying because that ability would have eased a particular issue in where the accuracy of data in AD is questionable but the org has dept/division based OU structure..