Membership web action

More Options

Additional query criteria

Specify additional query criteria.

By default, Web Query Additional criteria value that is specified in the same setting in AD Users web query will be used.

Limit scope to this Domain or OU

This setting is deprecated.

Member properties to display

Specify columns for AD Group members' queries. You should specify LDAP property names. You can use ~ to change column name in the web form, for example, st~State

The default set of columns is taken from the Default columns for AD Group members query defined in Active Directory extension > Customize columns section.

Use Exchange to update Exchange DL membership

If set Exchange Server to update Distribution List membership to Yes, the Exchange connection account, specified in the Exchange extension, should have permissions in the Exchange Server to modify the membership of distribution groups.

Show object type filter on Web UI

Specify if the object type filter should be displayed on Web UI.

If set to Yes, the selection of 'Object classes' below will be ignored.

Object classes returned by lookup

Specify the classes of the objects that should be returned when you perform a search to add objects to the group.

You can put your object classes here divided by comma, or select predefined value.

This setting affects only the Find field on the Membership form. All possible types still be available in Advanced search regardless of the value set here.

Allow contacts

Specify what contacts are allowed to be group members: mail-enabled only (mailnickname is populated) or any contacts with a mail address (mailnickname or mail is populated).

More Options

Override Active Directory domains

Show Ticket input field

Show Comment input field

For information about these settings, please refer to the More Options description in the New User web action.

Enumerate group members and its properties

Specify the way how to enumerate group members and its properties:

1. Search managed and trusted domains (default).
2. Search managed domains, do not search trusted domains.
3. Get members' Name and Parent OU from the Member property of the group (legacy).

Resolve and show member display names (legacy)

For details, please see the description of the Create Active Directory object cache setting in the Active Directory extension. 

Maximum membership for display name resolution (legacy)

Limit the maximum membership for the display name and other properties look up, otherwise, it could affect the performance and it will take a lot of time to open the web action form. 

This setting is used only if you select the option 'Get members Name and Parent OU from Member property of the group (legacy)' in Enumerate group members and its properties setting.

In this case, if your group contains more objects than you specified in Maximum membership for display name resolution (legacy), web action will show all members, but only with Name and Parent OU column values, other columns will be shown as empty. Also, there will be a red banner on the form that says "DisplayName and UserPrincipalName suppressed due to group size.".

If a group contains fewer members than specified in the setting, you'll see all properties of the members in the grid without any banners. 

The 'Show object type filter on Web UI' setting has been added.

The 'Object classes returned by lookup' setting has been added.

Domain Controller and Credentials settings have been removed. 

'Additional query criteria' setting has been added.

New settings are added:

1. Enumerate group members and their properties.
2. Member properties to display.

These settings are renamed:

1. Resolve and show member display name (legacy).
2. Maximum membership for Display Name resolution (legacy).