Comment
Author: Admin | 2025-04-27
String value or nulluser.city -eq "value"countryAny string value or nulluser.country -eq "value"companyNameAny string value or nulluser.companyName -eq "value"departmentAny string value or nulluser.department -eq "value"displayNameAny string valueuser.displayName -eq "value"employeeIdAny string valueuser.employeeId -eq "value"user.employeeId -ne *null*facsimileTelephoneNumberAny string value or nulluser.facsimileTelephoneNumber -eq "value"givenNameAny string value or nulluser.givenName -eq "value"jobTitleAny string value or nulluser.jobTitle -eq "value"mailAny string value or null (SMTP address of the user)user.mail -eq "value" or user.mail -notEndsWith "@Contoso.com"mailNickNameAny string value (mail alias of the user)user.mailNickName -eq "value" or user.mailNickname -endsWith "-vendor"memberOfAny string value (valid group object ID)user.memberOf -any (group.objectId -in ['value'])mobileAny string value or nulluser.mobile -eq "value" objectIdGUID of the user objectuser.objectId -eq "aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb" onPremisesDistinguishedNameAny string value or nulluser.onPremisesDistinguishedName -eq "value" onPremisesSecurityIdentifierOn-premises security identifier (SID) for users who were synchronized from on-premises to the cloud.user.onPremisesSecurityIdentifier -eq "S-1-1-11-1111111111-1111111111-1111111111-1111111"passwordPoliciesNoneDisableStrongPasswordDisablePasswordExpirationDisablePasswordExpiration, DisableStrongPassworduser.passwordPolicies -eq "DisableStrongPassword"physicalDeliveryOfficeNameAny string value or nulluser.physicalDeliveryOfficeName -eq "value"postalCodeAny string value or nulluser.postalCode -eq "value"preferredLanguageISO 639-1 codeuser.preferredLanguage -eq "en-US"sipProxyAddressAny string value or nulluser.sipProxyAddress -eq "value"stateAny string value or nulluser.state -eq "value"streetAddressAny string value or nulluser.streetAddress -eq "value"surnameAny string value or nulluser.surname -eq "value"telephoneNumberAny string value or nulluser.telephoneNumber -eq "value"usageLocationTwo letter country or region codeuser.usageLocation -eq "US"userPrincipalNameAny string valueuser.userPrincipalName -eq "alias@domain"userTypemember guest nulluser.userType -eq "Member"Properties of type string collectionPropertiesAllowed valuesExampleotherMailsAny string valueuser.otherMails -startsWith "alias@domain", user.otherMails -endsWith"@contoso.com"proxyAddressesSMTP: alias@domain smtp: alias@domainuser.proxyAddresses -startsWith "SMTP: alias@domain", user.proxyAddresses -notEndsWith "@outlook.com"For the properties used for device rules, see Rules for devices.Supported expression operatorsThe following table lists all the supported operators and their syntax for a single expression. Operators can be used with or without the hyphen (-) prefix. The Contains operator
Add Comment