Hello Massimo,
We have no exact dates of the next release that will include the feature. For now you can use the If PowerShell script returns true condition to achieve what you need.
Below is an example of the script you can use in the condition:
$ouDN = "OU=Users,DC=domain,DC=com" # TODO: modify me
$groupDN = "CN=MyGroup,OU=Groups,DC=domain,DC=com" # TODO: modify me
# Check user location
$userDN = New-Object "Softerra.Adaxes.Ldap.DN" "%distinguishedName%"
$Context.ConditionIsMet = $False
if($userDN.IsDescendantOf($ouDN))
{
$Context.ConditionIsMet = $True
return
}
# Check group membership
$userGroupGuids = New-Object "System.Collections.Generic.HashSet[System.Guid]"
try
{
$Context.TargetObject.GetEx("adm-MemberOfGuid") | %%{[void]$userGroupGuids.Add([Guid]$_)}
}
catch
{
return
}
$group = $Context.BindToObjectByDN($groupDN)
$groupGuid = [Guid]$group.Get("ObjectGuid")
$Context.ConditionIsMet = $userGroupGuids.Contains($groupGuid)