Using User Directory with exception group access

[Anatoly Nikolaev]

Could we use User Directories settings for login "User Schema Settings" -> "User Object Filter" with one big group and excent another small group?

Are "User Object Filter" accept "!=" operator for group or another one?

[Zul NS [Atlassian]]

You can use memberOf in the User Object Filter similar to the following (example from here)

(&(objectCategory=Person)(sAMAccountName=*)(memberOf=CN=jira-users,OU=Distribution Groups,DC=domain,DC=corp))

An example of != would be something like

(&(objectCategory=Person)(!(cn=user)))

More example can be found in https://confluence.atlassian.com/display/DEV/How+to+write+LDAP+search+filters