Add roles based on memberOf

This document describes how to create an item property called roles based on a group membership

In this case the item property memberOf is added to the item in an LDAP Search. The item property will have to be treated as a multi value in the expression.

The following example will ADD an item property called roles with the value test to the current item.

{
  "name": "ItemPropertyAdd",
  "display_name": "PropertyAdd - roles:test",
  "config": {
    "item_include_expr": "mv.containsAny(item.memberOf, 'CN=Group1,OU=Groups,DC=company,DC=local', true)",
    "values": {
      "roles": "test"
    }
  }
}