Dynamic Membership Rules

You can set up rules that, if met, cause users to be members of this group. These users are dynamic members of the group because their membership depends on specific values in their user profiles, or their membership in other groups. For example, you can set up a rule that states that all employees in Texas are part of this group. If an employee moves to Arizona, and the "State" property in her profile changes, the employee no longer satisfies this rule.

Dynamic group members are automatically added or removed from groups as their profile data changes, depending on the rules you set up on this page. The update is implemented via the Dynamic Membership Update Agent job in the Intrinsic Operations folder.

Static group members are defined for this group on the Group Memberships page. They are permanent members of the group until you manually remove them from the group members list or from a group that is on the group members list.

Dynamic membership rules are made up of statements that define what must or must not be true to add the user to the group. The statements are collected together in groupings. The grouping defines whether the statements are evaluated with an AND operator (all statements are true) or an OR operator (any statement is true). If some statements should be evaluated with an AND operator and some should be evaluated with an OR operator, you can create separate groupings for the statements. You can also create subgroupings or nested groupings, where one grouping is contained within another grouping. The statements in the lowest-level grouping are evaluated first to define a set of objects. Then the statements in the next highest grouping are applied to that set of objects to further filter the set of objects. The filtering continues up the levels of groupings until all the groupings of statements are evaluated.

1. Select the operator for the grouping of statements you are about to create:

• If a user should be added to the group only when all statements in the grouping are true, select AND.

• If a user should be added to the group when any statement in grouping is true, select OR.

Note: The operator you select for a grouping applies to all its statements and subgroupings directly under it.

2. Define each statement in the grouping:

1. Click Add Statement.

2. In the first drop-down list, select the searchable property for which you want to filter the values.

3. In the second drop-down list, select the operator to apply to this condition. This list will vary depending on the property selected:

• For any text property, you can search for a value that contains your search string, or you can search for properties that have never had a value (Contains No Value).
  
  Note: If the property contained a value at some point, but the value has been deleted, the property will not match the Contains No Value condition.

• For any date property, you can search for a value that comes after, comes before, is, or is not the date and time you enter in the boxes. You can also search for a value within the last number of minutes, hours, days, or weeks that you enter in the box.

• For any number property, you can search for a value that is greater than, is less than, is, is not, is greater than or equal to, or is less than or equal to the number you enter in the text box.

4. In the box (or boxes), specify the value the property must meet.
   
   Note: If you are searching for a text property, you can use the text search rules.

• To add more statements, repeat these steps.

• To delete the last property statement in the grouping, select the grouping, and click Remove Statement.

3. If necessary, add more groupings:

• To add another grouping, select the grouping to which you want to add a subgrouping, and click Add Grouping. Then define the statements for that grouping (as described in step 2).
  
  Note: You cannot add a grouping at the same level as Grouping 1.

• To remove a grouping, select the grouping, and click Remove Grouping.
  
  Notes:

• Any groupings and statements in that grouping will also be removed.

• You cannot remove Grouping 1.

4. Click Preview Members to see dynamic members resulting from the rules you have set up. (Only 1000 members will be displayed.)

5. When you are done, click Finish.

The dynamic members are automatically added to this group when you click Finish. The next time you open this group editor, dynamic members are displayed in the Group Memberships page.

• To display the page associated with this help topic:

1. Click Administration.
2. Open the Group Editor:
• To create a new group:
1. Open an administrative folder.
2. In the Create Object drop-down list, click Group.
• To edit an existing group:
1. Navigate to the group you want to edit.
2. Click the group name.
3. On the left, under Edit Object Settings, click Dynamic Membership Rules.