To modify membership rules of a Business Unit:
Launch the Adaxes Administration Console.
In the Console Tree, expand the service node that contains the Business Unit, membership rules of which you want to modify (the
icon represents service nodes).
Expand the
Business Units node.
Right-click the Business Unit you need, and click Membership Rules.
To add a membership rule to the Business Unit, do the following:
Click Add... below the Membership Rules list.
In the Add Membership Rules dialog, select a membership rule type and define Rule parameters as follows:
To create a membership rule to include/exclude specific objectsSelect Specific Objects in the list of membership rule types and click Add.
In the Select Objects dialog, select the objects you want to include to or exclude from the Business Unit.
![[Tip]](img/tip.png)
Tip If the object types you need are not displayed, click Object Types below the search results list, and check the object types to search for.
Click OK.
Tip To exclude the selected objects from the Business Unit, check Exclude specified objects.
To create a membership rule to include/exclude group membersSelect Group Members in the list of membership rule types and click Select Group.
In the Select Group dialog, select the group, members of which you want to include to or exclude from the Business Unit.
Click OK.
Tip If you want to include or exclude only direct members of the group, and to omit members of nested groups, check Direct members only.
Tip To exclude the selection from the Business Unit, check Exclude specified objects.
To create a membership rule to include/exclude container childrenSelect Container Children in the list of membership rule types and click Select Container.
In the Select Location dialog, select the container, child objects of which you want to include to or exclude from the Business Unit.
Tip By default, only organizational units are displayed. To view containers, click Show Containers below the search results list.
Click OK.
Tip If you do not want to include or exclude all descendants of the specified container, but its immediate children only, check Direct children only.
Tip To exclude the selection from the Business Unit, check Exclude specified objects.
To create a membership rule to include/exclude search resultsSelect Query Results in the list of membership rule types.
In the Look in combo box, select a domain, or click Browse button to select a container to search in.
Define the scope of the search.
One level - the search is performed only for child objects of the selected container.
Sub-tree level - the search is performed on all descendants of the selected container.
Specify LDAP search filter. You can do it in three ways:
To specify a filter manually, type it in the edit box.
To use a special editor for LDAP filters, click
Launch Filter Builder button inside the edit box. See Using Filter Builder.
To set a filter visually, click Edit and define appropriate parameters. Please note, that using this way, you cannot apply all flexibility of LDAP filters.
Tip By default, the search filter is "(objectClass=*)" and it means that filtering is not performed and all objects are included.
Click Results to see the objects corresponding to the specified criteria.
Tip To exclude the selection from the Business Unit, check Exclude specified objects.
Click OK.
To edit a membership rule, do the following:
In the Membership Rules list, select the rule you want to edit.
Click Edit... below the Membership Rules list.
Modify the rule parameters in the dialog box that opens.
Click OK.
To delete a membership rule, select the rule you need and click Delete below the Membership Rules list.
When finished, click OK.