Configure Group filter
When configuring the capture scope, you can limit the backup of specific users for particular workloads using Azure AD (Entra ID) group membership. This action ensures that only the required set of users' data is backed up.
From Cohesity Alta SaaS Protection version 2.20 onwards, you must have an ; you cannot create only an .
Workaround for versions before 2.20 (if only an exclude list exists):
Create a group in Azure AD (Entra ID).
Add all users to this group.
Add this group to the include list.
Starting from Cohesity Alta SaaS Protection version 2.30, if a group is empty, no mailboxes will be backed up.
- In the Group filter section, click Enable this feature.
- Click + Add group filter.
- Do any of the following:
Actions:
Include groups,
Exclude groups,
Steps:
Click Include.
Enter the name of the group to be included.
The list is populated based on the search.
Click the required group.
Click Add.
Click Exclude.
Enter the name of the group to be excluded.
The list is populated based on the search.
Click the required group.
Click Add.
Behaviors:
Only the data of users in the included groups is backed up.
All users' data is backed up except those in the excluded groups.
The page displays the added groups and their corresponding actions, which can be included or excluded. You can remove the group from the list using the Remove option.
to filter users based on Entra ID (Azure AD) extended attributes.
to filter by specific folders: