> For the complete documentation index, see [llms.txt](https://docs.fortifiedid.se/forms/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fortifiedid.se/forms/the-service/key-components/control/advanced-controls/activedirectoryusereditgroupmember/properties.md).

# Properties

### Requirements

An LdapClient module deployed with matching name as defined in "*namespace*".

### Configuration

{% tabs %}
{% tab title="Properties" %}

<table><thead><tr><th width="196">Name</th><th width="243">Desciption</th><th width="178">Default value</th><th data-type="checkbox">Mandatory</th></tr></thead><tbody><tr><td>type</td><td>Must be ActiveDirectoryUserEditGroupMember</td><td>N/A</td><td>true</td></tr><tr><td> namespace</td><td>Identifier of LdapClient module to use</td><td>default</td><td>false</td></tr><tr><td>columns</td><td>List array with columns to display</td><td>["cn","description"]</td><td>false</td></tr><tr><td>change_is_required</td><td>Force admin to update user, true/false</td><td>false</td><td>false</td></tr><tr><td>base_dn</td><td>Search base DN.</td><td>"DC=company,DC=local"</td><td>false</td></tr><tr><td>scope</td><td>Search scope.</td><td>"SUB"</td><td>false</td></tr><tr><td>current_filter</td><td>Search filter. Used to fetch all groups the the user is a member of.</td><td>N/A</td><td>true</td></tr><tr><td>available_filter</td><td>Search filter. Used to fetch available groups.</td><td>N/A</td><td>true</td></tr></tbody></table>
{% endtab %}

{% tab title="Example" %}

```json
{
    "id": "adUserGroupMember",
    "type": "ActiveDirectoryUserEditGroupMember",
    "config": {
        "namespace": "ldap_client_1",
        "base_dn": "DC=company,DC=local",
        "current_filter": "(&(objectClass=group)(member={{{flow.findMyActiveDirectoryUsers}}}))",
        "available_filter": "(&(objectClass=group)(!(member={{{flow.findMyActiveDirectoryUsers}}})))",
        "columns": [
            "cn",
            "sAMAccountName"
        ]
    }
}
```

{% endtab %}
{% endtabs %}

{% hint style="warning" %}
This control works in conjunction with LdapClient module. It must be installed. &#x20;
{% endhint %}

### Exposed data to flow

Object array, "ad\_pending\_remove" - contains data on what groups to remove from user.

Object array, "ad\_pending\_add" - contains data on what groups to add to user.

Array data will have the syntax:

```json
"ad_pending_add": [
    {
        "id": "CN=AWS administrator,OU=access_review,OU=Governance,OU=IdM_demo,OU=Product_Testing,DC=company,DC=local",
        "description": "Test",
        "cn": "AWS administrator",
        "sAMAccountName": "AWS administrator"
    },
    {
        "id": "CN=Cert Publishers,CN=Users,DC=company,DC=local",
        "description": "Members of this group are permitted to publish certificates to the directory",
        "cn": "Cert Publishers",
        "sAMAccountName": "Cert Publishers"
    }
],
"ad_pending_remove": [
    {
        "id": "CN=Access Control Assistance Operators,CN=Builtin,DC=company,DC=local",
        "cn": "Access Control Assistance Operators",
        "sAMAccountName": "Access Control Assistance Operators",
        "description": "Members of this group can remotely query authorization attributes and permissions for resources on this computer."
    }
]
```

&#x20;Valves used in finalize pipe

**`ActiveDirectoryAddMemberToGroups`**

Used to add a single group member to groups

**`ActiveDirectoryRemoveMemberFromGroups`**

Used to remove a single group member from groups