Microsoft 365

The following sections list the criteria that are supported in auto discovery advanced mode rules for Microsoft 365 objects.

Exchange Mailbox

The sections below are the supported criteria and conditions.

CriteriaConditionTip
CityContains / Does not contain / Equals / Does not equal / Matches / Does not match
Cloud Governance metadataContains / Does not contain / Equals / Does not equal / Matches / Does not match
CompanyContains / Does not contain / Equals / Does not equal / Matches / Does not match
Usage locationEquals / Does not equal
Custom attributeContains / Does not contain / Equals / Does not equal / Matches / Does not matchAfter selecting this criterion, select an attribute number, which is retrieved from Exchange Online.
DepartmentContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Display nameContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Email addressContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Group membershipContains / Does not contain / Equals / Does not equal / Equals any of / Does not equal any ofThis criterion allows you to scan the mailboxes of users in a specific group.
If users are in a security group, enter the group name.
If users are in a Microsoft 365 group, distribution group, shared mailbox, or mail-enabled security group, enter the group ID before domain '@'.
If the group you entered has nested groups, AvePoint Online Services will scan mailboxes for users in the first five layers of groups.
If you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Job titleContains / Does not contain / Equals / Does not equal / Matches / Does not match
Exchange mailbox typeEquals / Does not equalThis criterion only supports app profiles with the Exchange.ManageAsApp API permission. You also must ensure that the app has been assigned with the Exchange Administrator role. For additional details, see How to Assign the Exchange Administrator Role to an App?
OfficeContains / Does not contain / Equals / Does not equal / Matches / Does not match
Microsoft 365 subscription nameContains / Does not contain / Equals / Does not equal
Geo locationEquals / Does not equalThis criterion corresponds to the Preferred Data Location property in a multi-geo Microsoft 365 tenant.
State or provinceContains / Does not contain / Equals / Does not equal / Matches / Does not match
User IDContains / Does not contain / Equals / Does not equal / Matches / Does not match
ZIP/Postal codeContains / Does not contain / Equals / Does not equal / Matches / Does not match
Sign-in statusEquals / Does not equal
Property synced from on-premises: Distinguished name / Domain name / Immutable ID / SAM account name / Security identifier / User principal nameContains / Does not contain / Equals / Does not equal / Matches / Does not match

OneDrive

CriteriaConditionTip
Site collection property > Created timeBefore / After / On / Within / Older than
Site collection property > Custom property: Date and TimeBefore / After / On / Within / Older than
Site collection property > Custom property: Number>= / <= / =
Site collection property > Custom property: TextContains / Does not contain / Equals / Does not equal / Matches / Does not match
Site collection property > Custom property: Yes/NoEquals / Does not equal
Site collection property > Orphaned OneDriveEquals / Does not equalFor an orphaned user that no longer exists in your organization, this user's OneDrive is regarded as an orphaned OneDrive. To use this criterion, contact AvePoint representatives to enable the scan for orphaned OneDrive first. For unified management, it is recommended that you configure one container for all orphaned OneDrive.
Site collection property > Primary administratorContains / Equals / Equals any ofIf you want to configure multiple values for the Equals any of condition, separate the values with a semicolon (;).
Site collection property > Site statusEquals / Does not equalAvailable options: Active / Locked (Read-only) / Locked (No access)
Site collection property > Size>= / <=
Site collection property > URLContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Basic user information > CityContains / Does not contain / Equals / Does not equal / Matches / Does not match
Basic user information > CompanyContains / Does not contain / Equals / Does not equal / Matches / Does not match
Basic user information > Country or regionContains / Does not contain / Equals / Does not equal / Matches / Does not match
Basic user information > Custom attributeContains / Does not contain / Equals / Does not equal / Matches / Does not match
Basic user information > DepartmentContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Basic user information > Employee typeContains / Does not contain / Equals / Does not equal / Matches / Does not match
Basic user information > Group membershipContains / Does not contain / Equals / Does not equal / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Basic user information > Job titleContains / Does not contain / Equals / Does not equal / Matches / Does not match
Basic user information > OfficeContains / Does not contain / Equals / Does not equal / Matches / Does not match
Basic user information > Sign-in statusEquals / Does not equal
Basic user information > Microsoft 365 subscription nameContains / Does not contain / Equals / Does not equal
Basic user information > Geo locationEquals / Does not equalThis criterion corresponds to the Preferred Data Location property in a multi-geo Microsoft 365 tenant.
Basic user information > UsernameContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Basic user information > Usage locationEquals / Does not equal
User profile property > BooleanEquals / Does not equal
User profile property > DateBefore / After / On / Within / Older than
User profile property > EmailContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
User profile property > PersonContains / Does not contain / Equals / Does not equal / Matches / Does not match
User profile property > String (single value)Contains / Does not contain / Equals / Does not equal / Matches / Does not match
User profile property > URLContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).

SharePoint Site

CriteriaConditionTip
Archive statusEqualsAvailable options: Archived / Not archived
Created timeBefore / After / On / Within / Older than
Creator > DepartmentContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Creator > Microsoft Entra ID attributeContains / Does not contain / Equals / Does not equal / Matches / Does not match
Creator > Group membershipContains / Does not contain / Equals / Does not equal / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Creator > Custom property: TextContains / Does not contain / Equals / Does not equal / Matches / Does not match
Custom property: Date and TimeBefore / After / On / Within / Older than
Custom property: Number>= / <= / =
Custom property: TextContains / Does not contain / Equals / Does not equal / Matches / Does not match
Custom property: Yes/NoEquals / Does not equal
External sharing: Anyone / New and existing guests / Existing guests only / Only people in your organizationEquals / Does not equal
Primary administratorContains / Equals / Equals any ofIf you want to configure multiple values for the Equals any of condition, separate the values with a semicolon (;).
Sensitivity labelContains / Does not contain / Equals / Does not equal / Matches / Does not match
Site classificationContains / Does not contain / Equals / Does not equal / Matches / Does not match
Geo locationEquals / Does not equalThis criterion corresponds to the Preferred Data Location property in a multi-geo Microsoft 365 tenant.
Site statusEquals / Does not equalAvailable options: Active / Locked (Read-only) / Locked (No access)
Size>= / <=
Template nameContains / Does not contain / Equals / Does not equal / Matches / Does not matchAn example for Template name is STS#0.
Template titleContains / EqualsAn example for Template title is Team Site.
TitleContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
URLContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Hub site nameContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Last activity (UTC)Before / After / On / Within / Older than / Is no detected activity

Microsoft 365 Group / Microsoft Team / Viva Engage Community

CriteriaConditionTip
Group / Team / Viva Engage community property > TypeEquals / Does not equal
Group / Team / Viva Engage community property > Team statusActive / Archived
Group / Team / Viva Engage community property > Display nameContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Group / Team / Viva Engage community property > Creator > DepartmentContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Group / Team / Viva Engage community property > Creator: Microsoft Entra ID attributeContains / Does not contain / Equals / Does not equal / Matches / Does not matchFor more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions
Group / Team / Viva Engage community property > Creator: Usage locationContains / Does not contain / Equals / Does not equal / Matches / Does not matchFor more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions
Group / Team / Viva Engage community property > Creator: Custom property > TextContains / Does not contain / Equals / Does not equal / Matches / Does not matchFor more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions
Group / Team / Viva Engage community property > Custom attributeContains / Does not contain / Equals / Does not equal / Matches / Does not matchThis rule requires the Exchange Administrator role to be assigned to the related apps in your environment. For details, refer to How to Assign the Exchange Administrator Role to an App?
Group / Team / Viva Engage community property > Custom property > Number>= / <= / =For more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions.
Group / Team / Viva Engage community property > Custom property > TextContains / Does not contain / Equals / Does not equal / Matches / Does not matchFor more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions
Group / Team / Viva Engage community property > ClassificationContains / Does not contain / Equals / Does not equal / Matches / Does not match
Group / Team / Viva Engage community property > Cloud Governance metadataContains Does not contain / Equals / Does not equal / Matches / Does not match
Group / Team / Viva Engage community property > Primary email addressContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Group / Team / Viva Engage community property > Owner > Email addressContains / Does not contain / Equals / Does not equal / Matches / Does not match / Is not empty / Is a member of the group / Domain is / Equals any of / Does not equal any ofFor a community with multiple owners, it will be scanned into containers if any one of the owners meets the rule.
Equals - If you use this condition to scan a Microsoft 365 Group which has more than one owner, you add each owner's user ID using the Equals condition and apply the Or logic option to these Equals conditions.
Equals / Does not equal / Contains / Does not contain / Matches / Does not match - If you use any of these conditions to scan Microsoft 365 Groups, enter the full user ID before domain '@'.
Equals any of / Does not equal any of - Enter the full user ID before domain '@', and separate the values with semicolon (;).
Is a member of the group - This condition allows you to scan all Microsoft 365 Groups whose owner or at least one of their owners is a member of a group in Microsoft 365.
If the owner is in a security group, enter the group name.
If the owner is in a Microsoft 365 Group, distribution group, shared mailbox, or mail-enabled security group, enter the group ID before domain '@'.
If the group you entered has nested groups, AvePoint Online Services will search members from the first five layers.
Group / Team / Viva Engage community property > Owner > Usage locationEquals / Does not equalFor a community with multiple owners, it will be scanned into containers if any one of the owners meets the rule.
Group / Team / Viva Engage community property > MemberContains / Does not contain / Matches / Does not match / Is not empty / Equals any of / Does not equal any ofIf you use the Contains / Does not contain / Equals any of / Does not equal any of condition to scan Microsoft 365 Groups, enter the full user ID before domain '@'.
If you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Group / Team / Viva Engage community property > PrivacyEquals / Does not equal
Group / Team / Viva Engage community property > Sensitivity labelContains / Does not contain / Matches / Does not matchDue to the Microsoft Graph API limitations, only the final label value can be retrieved and used to configure conditions. For example, if an object's sensitivity label is A/B/C/D, only D can be used to set conditions.
Group / Team / Viva Engage community property > Geo locationEquals / Does not equalThis criterion corresponds to the Preferred Data Location property in a multi-geo Microsoft 365 tenant.
Group team site property > Archive statusEqualsAvailable options: Archived / Not archived
Group team site property > Created timeBefore / After / On / Within / Older than
Group team site property > Custom property > Date and TimeBefore / After / On / Within / Older than
Group team site property > Custom property > Number>= / <= / =For more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions
Group team site property > Custom property > TextContains / Does not contain / Equals / Does not equal / Matches / Does not matchFor more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions.
Group team site property > Custom property > Yes/NoEquals / Does not equal
Group team site property > External sharing: Anyone / New and existing guests / Existing guests only / Only people in your organizationEquals / Does not equal
Group team site property > Hub site nameContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Group team site property > Last activity (UTC)Before / After / On / Within / Older than / Is no detected activity
Group team site property > Sensitivity labelContains / Does not contain / Equals / Does not equal / Matches / Does not match
Group team site property > Site statusEquals / Does not equalAvailable options: Active / Locked (Read-only) / Locked (No access)
Group team site property > Size>= / <=
Group team site property > TitleContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Group team site property > URLContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).

Project Site

CriteriaConditionTip
Archive statusEqualsAvailable options: Archived / Not archived
Created timeBefore / After / On / Within / Older than
Custom property > Date and TimeBefore / After / On / Within / Older than
Custom property > Number>= / <= / =
Custom property > TextContains / Does not contain / Equals / Does not equal / Matches / Does not match
Custom property > Yes/NoEquals / Does not equal
External sharingEquals / Does not equalAvailable options: Anyone / New and existing guests / Existing guests only / Only people in your organization
Primary administratorContains / Equals / Equals any ofIf you want to configure multiple values for the Equals any of condition, separate the values with a semicolon (;).
Sensitivity labelContains / Does not contain / Equals / Does not equal / Matches / Does not match
Geo locationEquals / Does not equalThis criterion corresponds to the Preferred Data Location property in a multi-geo Microsoft 365 tenant.
Site statusEquals / Does not equalAvailable options: Active / Locked (Read-only) / Locked (No access)
Size>= / <=
Template nameContains / Does not contain / Equals / Does not equal / Matches / Does not match
Template titleContains / Equals
TitleContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
URLContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).

Exchange Public Folder

CriteriaConditionTip
Display nameContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
PathIs under / Is not under

Microsoft 365 User

CriteriaConditionTip
CityContains / Does not contain / Equals / Does not equal / Matches / Does not match
CompanyContains / Does not contain / Equals / Does not equal / Matches / Does not match
Usage locationEquals / Does not equal
DepartmentContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Display name (Note that if you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon ";").Contains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any of
DomainEquals / Does not equal
Email addressContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Geo locationEquals / Does not equalThis criterion corresponds to the Preferred Data Location property in a multi-geo Microsoft 365 tenant.
Group membershipContains / Does not contain / Equals / Does not equal / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Job titleContains / Does not contain / Equals / Does not equal / Matches / Does not match
Microsoft 365 subscription nameContains / Does not contain / Equals / Does not equal
OfficeContains / Does not contain / Equals / Does not equal / Matches / Does not match
Primary email domainEquals / Does not equal / Equals any ofIf you want to configure multiple values for the Equals any of condition, separate the values with a semicolon (;).
Sign-in statusEquals / Does not equal
State or provinceContains / Does not contain / Equals / Does not equal / Matches / Does not match
User IDContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
ZIP/Postal codeContains / Does not contain / Equals / Does not equal / Matches / Does not match
Property synced from on-premises: Distinguished name / Domain name / Immutable ID / SAM account name / Security identifier / User principal name /Contains / Does not contain / Equals / Does not equal / Matches / Does not match
Sync statusEquals / Does not equal
User typeEquals / Does not equalAvailable options:
Member /
Guest
B2B invitation statusEquals / Does not equalAvailable options:
Accepted /
Pending acceptance

Security and Distribution Group

NOTE

The Security and distribution group object type includes security groups, mail-enabled security groups, distribution lists, room lists, and dynamic distribution lists.

CriteriaConditionTip
Group type: Security group / Mail-enabled security group / Distribution list / Dynamic distribution list /Equals / Does not equalThis criterion cannot be used to filter room list type distribution lists.
Display nameContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofIf you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
OwnerContains / Does not contain / Equals / Does not equal / Matches / Does not match / Is not empty / Is a member of the group* / Domain is / Equals any of / Does not equal any ofThis criterion only scans users with the Exchange license assigned.
Equals - If you use this condition to scan a Microsoft 365 Group which has more than one owner, you add each owner's user ID using the Equals condition and apply the Or logic option to these Equals conditions.
Equals / Does not equal / Contains / Does not contain / Matches / Does not match - If you use any of these conditions to scan Microsoft 365 Groups, enter the full user ID before domain '@'.
Equals any of / Does not equal any of - Enter the full user ID before domain '@', and separate the values with semicolon (;).
Is a member of the group - This condition allows you to scan all Microsoft 365 Groups whose owner or at least one of their owners is a member of a group in Microsoft 365.
If the owner is in a security group, enter the group name.
If the owner is in a Microsoft 365 Group, distribution group, shared mailbox, or mail-enabled security group, enter the group ID before domain '@'.
If the group you entered has nested groups, AvePoint Online Services will search members from the first five layers.
This criterion cannot be used to filter dynamic distribution lists.
MemberContains / Does not contain / Matches / Does not match / Equals any of / Does not equal any of / Is not emptyThis criterion only scans users with the Exchange license assigned.
If you use the Contains / Does not contain / Equals any of / Does not equal any of condition to scan groups, enter the full user ID before domain '@'.
If you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
This criterion cannot be used to filter dynamic distribution lists and room lists.
Primary email addressContains / Does not contain / Equals / Does not equal / Matches / Does not match / Equals any of / Does not equal any ofThis criterion cannot be used to filter security groups, but it works for mail-enabled security groups.
If you want to configure multiple values for the Equals any of or Does not equal any of condition, separate the values with a semicolon (;).
Created timeBefore / After / On / Within / Older than
Custom attributeContains / Does not contain / Equals / Does not equal / Matches / Does not matchThis criterion cannot be used to filter security groups, but it works for mail-enabled security groups.
Custom property > Number>= / <= / =For more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions.
This criterion cannot be used to filter dynamic distribution lists and room lists.
Custom property > TextContains / Does not contain / Equals / Does not equal / Matches / Does not matchFor more information about extended properties, refer to this Microsoft article: Add custom data to groups using schema extensions.
This criterion cannot be used to filter dynamic distribution lists and room lists.
Sync statusEquals / Does not equalThis criterion cannot be used to filter room list type distribution lists.
Cloud Governance metadataContains / Does not contain / Equals / Does not equal / Matches / Does not matchThis criterion cannot be used to filter dynamic distribution lists and room lists.

Loop Workspace

NOTE

Currently, only the EnPower service supports configuring app profiles and scan profiles to scan Loop Workspace objects.

CriteriaConditionTip
Created timeBefore / After / On / Within / Older than
Geo locationEquals / Does not equalThis criterion corresponds to the Preferred Data Location property in a multi-geo Microsoft 365 tenant.
Loop nameContains / Does not contain / Equals / Does not equal / Matches / Does not match
Sensitivity labelContains / Does not contain / Equals / Does not equal / Matches / Does not match