This setting defines the search query scope. To improve query performance, limit the scope to a specific OU.

IMPORTANT: To test the rule configuration, limit the rule scope to an OU that contains test accounts or objects and use the Preview feature.

Query criteria are sent with the query and may improve query performance.

TIP: For additional information on the criteria builder, see the How to use Query Builder dialog for Query Criteria and Filter rule settings.

Set the filtering conditions to hide unwanted data based on criteria not supported in the Query criteria setting.

Example: filter by the found object Distinguished Name.

TIP: For optimal performance, use the Query criteria setting above to filter objects whenever possible.

Each object property defined in this setting matches the column that will be displayed in the Web Portal for this web query.

To display additional columns, add the required properties to the Properties to display list.

To add extension attribute 1 that is synchronized from AD, you need to use a value like:

"OnPremisesExtensionAttributes/extensionAttribute1~Extension Attribute 1"

Select an attribute from the list.

You can select multiple attributes. In this case, all these attributes would be cleared or set to the value specified in the Value setting.

Set attribute(s) value.

Example 1: Append some text to AD Users DisplayName attribute.

NOTE: You must add DisplayName attribute to Returned properties list.

Example 2: Change all phone numbers from this format 111.222.3333 to this format 111-222-3333.

{[String]::Format('{0:###-###-####}',[Int64]($FoundObject.telephoneNumber -replace '\D+(\d+)','$1'))}

NOTE: You must add telephoneNumber attribute to Returned properties list.

Example 3: Disable Active Directory user:

$($FoundObject.userAccountControl -bor 0x2)

NOTE: You must add userAccountControl attribute to Returned properties list.

Example 4: Set accountExpires attribute to expire in 90 days from now.

([DateTime]::Now.Date.AddDays(90))

Example 5: Update multi-valued virtual attribute. 

["val1","val2","val3"]

Select the update method for the attributes value:

• Always update: Forces the attribute to update regardless of its current value.

• Only update empty values: Updates the attribute only if it is currently empty.

• Only update on value difference: Updates the attribute only if the new value differs from the existing one.

Account

Settings