Groups-Security web query

Limit scope to this Azure AD Administrative Unit

This setting defines the search query scope.

To improve query performance, limit the scope to a specific Azure Admin Unit.

Group type

Specify the type of groups that should be included in the web query scope:

1. All security groups
2. All security groups without unified groups
3. Mail-enabled security groups
4. Mail-enabled security groups without unified groups
5. Non-mail-enabled security groups

Query criteria

Query criteria are sent to the target platform with other query parameters to reduce the number of returned objects and may improve query performance.

Other Query Settings

Properties to display

Each object property defined in this setting matches the column that will be displayed in the Cayosoft Web portal for this web query.

To display additional columns, add the required properties to the Properties to display list.

System properties

List of properties required for this rule to be executed correctly.

Post-query filter

To hide unwanted data based on criteria, not supported by the target system in the query criteria, set the filtering conditions here.

Example: filter by the found object Distinguished Name.

Sort by

Sort result object list.

Limit result set

The maximum number of users returned from Microsoft 365 by default is 2000.

MS Graph query condition (OData)

By default, Query criteria are used. But when the MS Graph query condition is specified, it overrides the Query criteria setting.

See this article for examples: How to use Query Builder dialog for Query Criteria and Filter rule settings – Cayosoft Help Center.

Initialization script

Usually, rules use query criteria to limit the query search scope. It improves the performance of the executed rule.

Due to PowerShell limitations, it is not possible to use calculated expressions in query criteria. That is the point where the initialization script can help. You can initialize a global variable in this setting and then use it in query criteria.

Example: Update AD users, created in the last ten days.

1. Add this initialization script:

{$global:DatePeriod = (Get-Date).AddDays(-10)}

2. Use $DatePeriod variable in the query criteria builder:

MS Graph advanced queries

Enables consistency level eventually which uses an index that might not be up-to-date with recent changes to the object.