This setting defines the search query scope. To improve query performance, limit the scope to a specific OU.

IMPORTANT: To test the rule configuration, limit the rule scope to an OU that contains test accounts or objects and use the Preview feature.

Query criteria are sent with the query and may improve query performance.

TIP: For additional information on the criteria builder, see the How to use Query Builder dialog for Query Criteria and Filter rule settings.

Set the filtering conditions to hide unwanted data based on criteria not supported in the Query criteria setting.

Example: filter by the found object Distinguished Name.

TIP: For optimal performance, use the Query criteria setting above to filter objects whenever possible.

Apply licenses to unlicensed users only or all users.

This setting allows to exclude Office 365 disabled users from the rule scope or to include them.

To hide unwanted data returned by the query, set the filtering conditions.

Specify with which profiles users should be included in the query scope:

More options

To display additional Office 365 properties for each object found by the query, add those properties to the list.

Sort result objects list.

Specify if disabled AD user accounts should be excluded from the hybrid mapping.

Specify if shared mailboxes should be excluded.

By default, all objects that you have provisioned in Microsoft Office 365 are returned.

TIP: It is possible to change the default value in the extension settings.

Too many errors may indicate rule misconfiguration or problems with connectivity.

Set this value to some integer value, indicating the number of occurred errors, when the rule execution should stop.

Initialization script

Two options are possible:

• Report only - get the report about profiles that are currently assigned to users in the rule scope.

• Enforce and report - enforce the profile defined in the rule and report about the results.

Select one of the configured license profiles or specify if:

• Reapply currently assigned profile.

• Clear profile and keep existing licenses.

• Clear profile and revoke existing licenses.

Specify what should be done if the license profile should be reapplied but this profile was deleted:

• Skip and report.

• Clear profile and keep existing licenses.

• Clear profile and revoke all licenses.

Specify if the license with the Free selection enforcement option should be assigned to a user: 

• Default - assign licenses marked as Free selection (selected) inside the profile but only for users without existing license assignments.

• Always ignore - don't assign licenses with Free selection (selected).

• Always assign - assign licenses with Free selection (selected).

Specify whether to keep the current user's usage location or change it to a new one.