Create conditions for particular users or groups of users identified using Active Directory account name. The defined criteria are compared to that of the logged on user and the associated rule items are executed. By doing this you can target custom rules to users or groups of users.
|User Name||A condition for an individual user based on user name.
The user name must be prefixed by the appropriate domain name:
|AAD User Name||A condition for an individual user based on AAD user name.|
|User Group||A condition for a specific group of users such as Power Users or Guests.
The agent connects to the Active Directory specified in the condition criteria and collates a list of Security Identifiers (SID) for all the groups the user is a member. A comparison is made with the list against the SID for the configuration.
|AAD User Group||A condition for a specific group of AAD users such as Power Users or Guests.
The agent connects to the Azure AD specified.
|Is Administrator||A condition based on the administrator rights of the user.|
|Primary Group||A condition based on membership of an Active Setup Primary Group.
All Active Directory users have a Primary Group, used to support certain products. The default setting for Primary Group is Domain Users for all Active Directory users.