Business Unit LDAP Query of ManagedBy when ManagedBy is a group

Question

I'm trying to setup SelfService group management. We have multiple Forests. Because of the Forests we can't add users from a different forest to the ManagedBy. We can add a local security group and do group nesting of a global group from the other forest though.

I'm trying build an ldap query for a business unit that will list the groups a user is allowed to manage. Since it's a group that is in the ManagedBy I need to get that first then find if the user is a memberof that group and then have it display in the Business Unit.

I'm not great with LDAP and seem to be finding it difficult to build this kind of query if it's even possible.

Any suggestions would help.

Thank you.

Current Query for Business Unit, there are two different ones: (&(objectCategory=group)(managedBy=%distinguishedName%)) (&(objectCategory=group)(msExchCoManagedByLink=%distinguishedName%))

These get the manageBy if the DN of the user is a member. I'm having a hard time trying to figure out how to get the managedBy Group first then find if the users %distinguishedName% is a member of that group.

If seems like my queries end up getting all the groups a user is a memberof or nothing at all. :)

Answer 1

Hello,

Unfortunately, there is no way to achieve the desired behavior using just a Query results membership rule with an explicit LDAP filter. You will need to store the filter for each user in their properties and use a value reference for the property in the business unit settings. For details, have a look at the following script from our repository: https://www.adaxes.com/script-repository/create-ldap-filter-to-find-all-objects-managed-by-user-s268.htm.