I am trying to find relevance to check for the existence of the logged on user in a specific AD group, say AD group “XXXXX”.
The following relevance works to return all of the groups for the logged on user, but whenever I try to say the group = “XXXXX”, it returns operator “=” is not defined for the types active directory group.
(name of it, names of groups of it) of (logged on users of active directory)
Seems like I have something that works for testing the existence of the member of a group.
exists ((names of groups of it) of (logged on users of active directory)) whose (it is contained by set of “SNOW-Admin”)
Not sure if this is the best way, but it does seem to work.
You might want to check the frequency that the data is updated.
I believe the default refresh cycle for AD information is 12 hours. Not sure if that applies to user group memberships or not.