Partitioning Aggregation

The Microsoft Entra ID connector supports partitioning aggregation based on search filters. To use the partitioning feature complete the following:

  1. Enable Partitioning on the aggregation task definition page by selecting the Enable Partitioning checkbox.

  2. Add the following application configuration attribute:

    <entry key="userPartitions">

    The userPartitions configuration attribute is a multi-valued attribute. It’s value consists of different search filters for the attributes which are filterable like accountEnabled, city, displayName, mail, usageLocation and so on. For example:

    Copy 
    <entry key="userPartitions">
        <value>
            <List>
                 <String>startswith(displayName,'J')</String>
                 <String>startswith(givenName,'Smith')</String>
                 <String>accountEnabled eq true</String>
                 <String>userPrincipalName eq 'Paul@contoso.onmicrosoft.com'</String>
            </List>
        </value>
    </entry>    

For large environments, for faster delta aggregation of the accounts, the connector supports partition delta aggregation.

Note
Due to PowerShell limitations, partitioning aggregation does not aggregate Exchange Online attribute details and Shared Mailbox as entitlement.

Supported Operators

  • Logical operators: and, or

  • Comparison operators: 'eq'(equal to), ge' (greater than or equal to) and 'le'(Less than or equal to)

  • startswith

  • any is supported while querying multi valued properties

For example,

  • proxyAddresses/any(c:c eq 'smtp:Mary@contoso.com')

  • proxyAddresses/any(c:startswith(c,'smtp:Mary@contoso.com'))