# User List Filter **URL:** \ **Category:** Ignition\ **Created:** [July 14, 2022, 4:19pm UTC](https://forum.inductiveautomation.com/t/user-list-filter/61910 "2022-07-14T16:19:53Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![RonB](https://avatars.discourse-cdn.com/v4/letter/r/ce73a5/32.png) [@RonB](https://forum.inductiveautomation.com/u/RonB)\ **Post date:** [July 14, 2022, 4:19pm UTC](https://forum.inductiveautomation.com/t/user-list-filter/61910/1 "2022-07-14T16:19:53Z")
Ignition 8.1.17 Using the forum I was able to build a query to return users from specific groups. Is there a way to use wildcards such as \* or % to reduce the query? Ie. Plant\_Ignition\_1 Plant\_Ignition\_2 Below will return users from both groups. (&(objectClass=User) (|(memberOf=CN=Plant\_Ignition\_1,OU=Ignition,OU=ARG,OU=SM,DC=xxx,DC=xxx,DC=xxx) (memberOf=CN=Plant\_Ignition\_2,OU=Ignition,OU=ARG,OU=SM,DC=xxx,DC=xxx,DC=xxx))) I’ve read conflicting information on whether wildcards can be used, so if there’s a better route please advise. **Aiming for something like this;** (&(objectClass=User)(memberOf=CN=Plant\_Ignition\_\*,OU=Ignition,OU=ARG,OU=SM,DC=xxx,DC=xxx,DC=xxx)) ---
**Author:** ![pascal.fragnoud](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pascal.fragnoud/32/24728_2.png) [@pascal.fragnoud](https://forum.inductiveautomation.com/u/pascal.fragnoud)\ **Post date:** [July 14, 2022, 4:38pm UTC](https://forum.inductiveautomation.com/t/user-list-filter/61910/2 "2022-07-14T16:38:46Z")
I have no idea what I just read, what query language is this ? ---
**Author:** ![lrose](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/lrose/32/62724_2.png) [@lrose](https://forum.inductiveautomation.com/u/lrose)\ **Post date:** [July 14, 2022, 4:39pm UTC](https://forum.inductiveautomation.com/t/user-list-filter/61910/3 "2022-07-14T16:39:30Z")
Pretty sure it’s LDAP @RonB I would think it would be dependent on the server you are using. Is this for Microsoft AD or something else? ---
**Author:** ![RonB](https://avatars.discourse-cdn.com/v4/letter/r/ce73a5/32.png) [@RonB](https://forum.inductiveautomation.com/u/RonB)\ **Post date:** [July 14, 2022, 7:57pm UTC](https://forum.inductiveautomation.com/t/user-list-filter/61910/4 "2022-07-14T19:57:35Z")
@lrose Yes, it’s an LDAP query run through/tested with “Active Directory Users and Computers” application. Then modified to work in the Ignition User Sources; Advanced settings; User List Filter ---
**Author:** ![RonB](https://avatars.discourse-cdn.com/v4/letter/r/ce73a5/32.png) [@RonB](https://forum.inductiveautomation.com/u/RonB)\ **Post date:** [September 8, 2022, 8:50pm UTC](https://forum.inductiveautomation.com/t/user-list-filter/61910/5 "2022-09-08T20:50:03Z")
The end goal is that we do not populate the user list with All users from the AD server, but only those that pass through the user filters. Maybe a little elaboration would help. With only using active directory as the user source they are adding AD security groups such as admin, designer, maintenance etc. for each plant. ```auto (&(objectClass=User) (|(memberOf=CN=Plant_Ignition_1_Admin,OU=Ignition,OU=ARG,OU=SM,DC=xxx,DC=xxx,DC=xxx) (memberOf=CN=Plant_Ignition_1_Designer,OU=Ignition,OU=ARG,OU=SM,DC=xxx,DC=xxx,DC=xxx)(memberOf=CN=Plant_Ignition_1_Maintenance,OU=Ignition,OU=ARG,OU=SM,DC=xxx,DC=xxx,DC=xxx))) ``` Is there no way to retrieve all users that are part of “Plant\_Ignition\_1\_” ? Or is adding each group, by the fully distinguished name, the only option? ---
**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\ **Post date:** [September 8, 2022, 8:57pm UTC](https://forum.inductiveautomation.com/t/user-list-filter/61910/6 "2022-09-08T20:57:08Z")
Tip: use the \` code formatting button to preserve code indentation and apply syntax highlighting. It makes any code much easier to read. There’s an edit button (pencil icon) below your posts so you can fix them. ---
**Author:** ![deon.korb](https://avatars.discourse-cdn.com/v4/letter/d/8c91f0/32.png) [@deon.korb](https://forum.inductiveautomation.com/u/deon.korb)\ **Post date:** [September 9, 2022, 6:25am UTC](https://forum.inductiveautomation.com/t/user-list-filter/61910/7 "2022-09-09T06:25:25Z")
The only way if gotten it to work is to create an overall group, e.g. SCADA\_AllUsers, where all other actual groups are members of this group. I then use the following filter for the user list: `(&(objectCategory=person)(objectClass=user)(!(objectClass=computer))(memberOf:1.2.840.113556.1.4.1941:=CN=SCADA_AllUsers,OU=Systems,DC=whatever))` It works, but I’m also interested in your wildcard method as all the groups follow a sane naming convention