Is there a way to define a dynamic group that is "intersection" of members of two groups? Lets say, we have group A with members a1, a2, a3, b1, b2 and group B with members b1, b2, b3, a1, a2. I want to create a Dynamic group D which would contain only members a1, a2, b1, b2.
Is this possible?
Hi mna1
I've created the below objects in my environment in an OU called Intersection.
With Group A having these members:
And Group B having these members:
For the Dynamic Group (Group D), I created a "Include by query" membership rule, where my conditions were:
"MemberOf" Is (exactly) <Group A DN>
AND
"MemberOf" Is (exactly) <Group B DN>
As an LDAP Query that would be:
(&(objectCategory=Person)(objectClass=User)(MemberOf=<Group A DN>)(MemberOf=<Group B DN>))
With the end result being the group members being A1, A2, B1 and B2.
Hope this helps.
Kind regards
Stu
Hi mna1
I've created the below objects in my environment in an OU called Intersection.
With Group A having these members:
And Group B having these members:
For the Dynamic Group (Group D), I created a "Include by query" membership rule, where my conditions were:
"MemberOf" Is (exactly) <Group A DN>
AND
"MemberOf" Is (exactly) <Group B DN>
As an LDAP Query that would be:
(&(objectCategory=Person)(objectClass=User)(MemberOf=<Group A DN>)(MemberOf=<Group B DN>))
With the end result being the group members being A1, A2, B1 and B2.
Hope this helps.
Kind regards
Stu
