Filter Criteria and Filter Types

Filter criteria

There are three types of filter criteria:

  • Base a filter on Access Control criteria to see only objects to which specific users, groups, Organizational Units and/or Zones have access. For example, see all the objects that apply to users in the Organizational Unit "Netherlands".
  • Base a filter on Access Type criteria to see only objects for which access depends on a specific access method. For example, see all the objects for which access is set according to administrative role (regardless of which administrative role), or see all the objects for which access is set depending on Language (regardless of which Language) (for example E-mail Settings).
  • Base a filter on Workspace Control to see only objects for which access depends on specific Workspace Containers. For example, see all the objects that are available to computers in the Workspace Container "Terminal Servers".

Filter types

There are two types of filter:

  • A default filter shows all the objects for which at least one of the specified criteria applies either directly or indirectly.
  • An exclusive filter shows all the objects to which at least one of the criteria applies directly.
  • If the option Exclusive filter is not selected for a filter, items that would be affected if the option was checked are marked with an "i" (informational) in their icons.
  • When filtering on Organizational Unit (OU), nested groups or users across boundaries are not taken into account.

Example

Suppose you want to configure a filter based on the Access Control criterion Organizational Unit (OU) London. The Management Console contains four applications:

  • Calculator, with Access Control set to membership of OU London (which is part of OU Great Britain).
  • Notepad, with Access Control set to membership of OU Great Britain (with inheritance).
  • WordPad, with Access Control set to membership of Group Trafalgar Square (part of OU London).
  • Paint, with Access Control set to "All users".

This results in:

Object

Filtering

Exclusive Filtering

Calculator

(Access Control = OU London)

Result: Calculator is shown in filtered Management Console.

Reason: Direct relationship.

Result: Calculator is shown in filtered Management Console.

Reason: Direct relationship.

Notepad

(Access Control = OU Great Britain)

Result: Notepad is not shown in filtered Management Console.

Reason: Indirect relationship, but OU Great Britain is parent OU of OU London (higher in the hierarchy).

Result: Notepad is hidden in filtered Management Console.

Reason: No direct relationship.

WordPad

(Access Control = Trafalgar Square)

Result: WordPad is shown in filtered Management Console.

Reason: Indirect relationship, because Group Trafalgar Square is part of OU London (lower in the hierarchy)

Result: WordPad is hidden in filtered Management Console.

Reason: No direct relationship.

Paint

(Access Control = All users)

Result: Paint is shown in filtered Management Console.

Reason: Indirect relationship, because "All users" also includes users who are members of OU London (lower in hierarchy).

Result: Paint is hidden in filtered Management Console.

Reason: No direct relationship.

Avoid creating filters that combine Access Control, Access Type and/or Workspace Control criteria, as the results are difficult to predict.