This setting defines the search query scope. To improve query performance, limit the scope to a specific OU.

IMPORTANT: To test the rule configuration, limit the rule scope to an OU that contains test accounts or objects and use the Preview feature.

To hide unwanted data based on criteria, not supported by the target system in the query criteria, set the filtering conditions here.

Example: filter by the found object Distinguished Name.

TIP: For optimal performance, use the Query criteria above to filter objects whenever possible.

Each object property defined in this setting matches the column that will be displayed in the Web Portal for this web query.

To display additional columns, add the required properties to the Properties to display list.

Specify the filter value for the user state that will be selected by default in the Web Portal in the user web query filter.

• All

• Active

• Disabled

Specify the filter value for the user type that will be selected by default in the Web Portal in the user web query filter.

• All

• Users

• Guests

Specify account state:

• Any

• Enabled

• Disabled

Specify user type:

• Any

• Member

• Guest

Specify account sync status:

• Any

• Synced

• Cloud-only

Specify modern MFA status:

• Any

• Configured - a user has at least one authentication method configured.

• Not configured - a user doesn't have any authentication methods configured.

IMPORTANT: Due to the current nature of the Microsoft API that returns this information, users will be processed one by one by this MFA status post-filter. Expect 10 minutes of processing per every 300 returned users if this filter is enabled. Reduce the number of users by using query criteria to reduce the rule execution time.

Specify administrator role:

• Any

• Global Administrator

• Or select a specific Administrator role from the picker dialog.

Set a minimum number of days past since a user signs in to Microsoft 365. Use 0 to disable this check.

NOTE: Using this parameter requires an Azure AD Premium P1/P2 license in the tenant.

If you use Microsoft 365 extension attributes to store additional information for user accounts, you could select these attributes and map them to Other Attributes.

Learn more in: How to add custom attributes to New Object and Object Properties wizards in Web Portal.

Specify mailbox type:

• Do not filter

• Any mailbox

• No mailbox

• User

• Shared

• Room

• Equipment

Specify which users should be included:

• All users

• Licensed users only

• Unlicensed users only

You can filter users by assigned licenses and apps/services:

• License filter conditions are split into two groups: filter by licenses and filter by apps/services.

• Licenses can be filtered by ALL, ANY, and NOT:

  • ALL - user must have all listed licenses assigned

  • ANY - user must have at least one listed license assigned

  • NOT - user must not have any listed licenses assigned.

• Apps/services filter conditions: ENABLED (all specified) and DISABLED (all specified):

  • ENABLED (all specified) - user must have all listed apps/services

  • DISABLED (all specified) - user must not have all listed apps/services.

Also, you can add filtering by inheritance of assigned applications and services:

• Filter by direct or inherited (GBL) assignments

• Filter by direct assignments only

• Filter by inherited assignments (GBL).

Specify the text file to be imported.

The […] (three dots) button allows the user to browse for the file and the Create/Edit button allows the creation or editing of the existing file in the built-in Data Source editor.

Specify the separator used in the source CSV file.

Select a column in the data source that contains the attribute value for identifying and mapping a computer.

List of properties required for this rule to be executed correctly.

Sort result object list.

The maximum number of users returned from Microsoft 365 by default is 2000.

TIP: It is possible to change the default value in Microsoft 365 extension settings.

By default, Query criteria are used. But when the MS Graph query condition is specified, it overrides the Query criteria setting.

See this article for additional information: How to use Query Builder dialog for Query Criteria and Filter rule settings.

Learn more in: Web Portal settings.

1. Default user state filter value and Default user type filter value settings have been added.

2. Suspend Configuration section has been added.