IT Pro: How to read user's groups from Active Directory

Modified on 2023-02-27 12:10:09 +0100 by Jesper Frier.

Information about group membership can be used to distribute different signatures to groups of users.

This is useful when the data source is not updated or does not contain enough information to create group segments via field data.

Create a field in Xink. Preferences > Fields, click the '+' button.
Add the Property name ‘groupCnList’.

Xink accounts created from Feb 2018, will include 'Groups' field by default.

How to read groups from Active Directory Azure

Please submit a support ticket, and we'll activate it upon request.

How do group memberships show for employees?

Example:

["Services","TEAM FLY","_Fleet_Monitor_Export","Release_Manager","IT-admins","IT users","TEAM EXCHANGE","IT-IN","Second_Line","_Fleet_Monitor_Managers","E3 - Full","SMC Designers","IT-IN Xware Test","System_Owner","Team Mobile","Service_Now_Users","Intune - E3 EMS license","TEST - TH"]

How to read groups from Active Directory on-premises

If your Xink account was created before Feb 2018, get the latest version of ADExport in your Xink account:

AD Export tool will not pull group membership by default, and you need to add the user group /ug switch at the end of your command line to include it. Examples:

This example will pull all your AD users and incl. their group memberships:

C:\emsadexport.exe /secret:"INSERT-YOUR-SECRET-TOKEN" /ug

This example will pull users from an AD group and incl. their group memberships:

C:\emsadexport.exe /secret:"INSERT-YOUR-SECRET-TOKEN" /group:"My Test" /remove+ /ug

To verify that the user's group membership is exported:

This is an instruction to export groups to Xink - Learn more in example #7.

If you see '[ ]' as a result, it's because you are using /domain: switch which is not supported with /ug:

How to create a rule to target user's group membership

Go to 'Preferences' and click 'Rules'. Now create a rule where you check the 'Groups' field:

Don’t use the extra condition. It makes it more challenging to maintain. Keep one rule to one group check.

Move the rules up and down to change the execution order. It will stop at the first rule where the condition is met.