The main filter is used to exclude users from the import file, preventing them from being created in the system.
This is useful for roles such as elected officials, social support contacts, or foster parents who are registered in the HRM system for payroll purposes but should not have accounts in Active Directory (AD) or other connected systems.
Warning: Be very careful when changing the main filter. The main filter is an exclusion filter. Any user who matches the ruleset will be filtered out and not imported.
-
In eAdm, all rulesets associated with a sync step are exclusionary, while all other rulesets are inclusionary.
-
If you modify this filter, any existing users who meet the new filter criteria will be removed from eAdm AD during the next synchronization.
How to find the main filter
You can find the main filter by going to: eAdm Rulesets and searching for "main filter".
Interaction with the position filter
It is good practice to use the main filter in combination with a position filter.
The position filter removes specific job titles from an imported employee record that should not be granted any access. For example, an employee might have a primary daytime job and a secondary role as a social support contact. The position filter can remove the secondary role, ensuring that only the primary job is used to grant permissions.
Example: Removing users with no active positions
The most common use of the main filter is to exclude users who do not currently hold an active position. A user may not have an active position either because they were imported that way from the HRM system, or because all their assigned positions have been removed by the position filter.
To block these users, configure the main filter with a single rule:
-
Attribute:
All department numbers -
Condition:
Has no value
A single rule in the Main Filter ruleset where the "All department numbers" attribute is set to the condition "Has no value".