Microsoft 365 Devices | Add to Azure AD Administrative Units rule

Limit scope to this Azure AD Administrative Unit

This setting defines the search query scope.

To improve query performance, limit the scope to a specific Azure Admin Unit.

Query criteria

Query criteria are sent with the query and may improve query performance.

Post-query filter

To hide unwanted data based on criteria, not supported by the Microsoft 365 query criteria above, set the filtering conditions here.

Properties to display

Each object property defined in this setting matches the column that will be displayed in the Cayosoft Web portal for this web query.

To display additional columns, add the required properties to the Properties to display list.

Device State

Specify account state:

1. Any
2. Enabled
3. Disabled

Specify account sync status:

1. Any
2. Synced
3. Cloud-only

Specify which devices should be included in the rule scope:

1. Any
2. Managed only
3. Unmanaged only

Device Properties

Extension Attributes 

Extension attribute1 - Extension attrbute15

If you use Microsoft 365 extension attributes to store additional information for device accounts, you could select these attributes and map them to Other Attributes.

How to add custom attributes to New Object and Object Properties wizards in Web Portal – Cayosoft Help Center.

Map to text file

Select data source

Specifies the text file to be imported.

The […] button allows the user to browse for the file and the Create/Edit button allows the creation or editing of the existing file in the built-in Data Source editor.

CSV file should contain values for one of these device attributes:

1. ID
2. DeviceID
3. DisplayName 

Separator used in file

Data source anchor attribute

System anchor attribute

Other Query Settings

System properties

Sort by

Sort result objects list.

Limit result set

The maximum number of devices returned from Microsoft 365 by default is 2000.

MS Graph query condition (OData)

By default, Query criteria are used. But when the MS Graph query condition is specified, it overrides the Query criteria setting.

See this article for examples: How to use Query Builder dialog for Query Criteria and Filter rule settings – Cayosoft Help Center.

MS Graph advanced queries

Enables consistency level eventually which uses an index that might not be up-to-date with recent changes to the object.

Initialization script

Script

Usually, rules use query criteria to limit the query search scope. It improves the performance of the executed rule.

Due to PowerShell limitations, it is not possible to use calculated expressions in query criteria. That is the point where the initialization script can help. You can initialize a global variable in this setting and then use it in query criteria.

Example: Update AD users, created in the last ten days.

1. Add this initialization script:

{$global:DatePeriod = (Get-Date).AddDays(-10)}

2. Use $DatePeriod variable in the query criteria builder:

Target AU selection mode

1. Select a single Azure AD Administrative Unit directly from the setting.
2. Select Administrative Unit dynamically based on attribute mapping in a CSV file.

Action

1. Add to Admin Unit (preserve existing membership)
2. Move to Admin Unit (remove existing memberships in other Admin Units)
3. Remove from Admin Unit (preserve existing membership)
4. Set according to Azure AD container configuration in Microsoft 365 extension.

Azure AD Administrative Unit

Select the 'Azure AD Administrative Unit' if using the 'Select a single Azure AD Administrative Unit' mode above. Alternatively, select the CSV file column containing the Azure AD administrative Unit name if using a dynamic mapping file. 

Dynamic mapping from file settings

Data source 

Specify the text file for import.

Press the […] button to browse for the file, or the Create button to create or edit the file in the Cayosoft Administrator data source editor. 

DeviceAnchor can be one of these device's attributes:

1. ID
2. DeviceID
3. DisplayName 

Separator used in file 

Specify the separator that is used in the CSV file.

Azure AD anchor attribute

Specify cloud device attribute. For each object returned by the query, the selected attribute value will be used to map the object with the selected data source anchor. 

CSV anchor match column

Select the CSV file column that contains the values that will be matched to the Azure AD anchor attribute values.

Azure AD Administratie Unit column

Select the CSV file column containing the Azure AD Administrative Unit name if using a dynamic mapping file.