Groups inventory

When viewing the Groups inventory, you can use the following keywords to search and filter groups.

Source

The source reporting the groups can be searched or filtered by name using the syntax source:<name>.

source:ldap

Name fields

There are two name fields found in the group attributes that can be searched or filtered using the same syntax. Use the syntax <name_field>:<text> to search a field for matches.

The following name fields can be searched this way:

• name
• display_name

name:admin

display_name:"Domain Administrators"

Description

Use the syntax description:<text> to search the results in this field.

description:admin

Users

The user_id field is the unique identifier for a given user, written as a UUID. To search for groups that have a specific member based on the user’s ID, use the syntax user_id:<uuid>.

user_id:f8a26321-cbce-4fb5-a9ca-ffa809489dd5

Email

Use the syntax email:<address> to search for users by email address.

email:john@example.com

First seen

Use the syntax first_seen_at:<date> to search for users by when they were first seen in the organization. This field is compatible with the date comparison operators.

first_seen_at:<1day

Last seen

Use the syntax last_seen_at:<date> to search for users by when they were last seen in the organization. This field is compatible with the date comparison operators.

last_seen_at:>2years

Site name or ID

Use the syntax site:<term> to filter by site name or ID.

site:Primary

site:"Branch Office"

site:ad67d649-041b-439d-af59-f200053a8899

Organization name or ID

Use the syntax organization:<term> to filter by organization name or ID.

organization:runZero

organization:"Temporary Project"

organization:f1c3ef6d-cb41-4d55-8887-6ed3cfb3d42d