We would like to request the addition of support for a "NOT IN" condition (exclude AD group membership) within Recast Application Workspace targeting logic.
Use Case:
In our environment, we manage multiple Adobe packages:
Adobe Acrobat DC – assigned via AD Group Adobe-Acrobat-DC
Adobe Acrobat Reader – assigned via AD Group Adobe-Reader
The requirement is to ensure that users who are part of the Adobe-Acrobat-DC group do not receive the Adobe-Reader package. Currently, we can target based on group membership (IN), but cannot explicitly exclude users who are members of another group (NOT IN), leading to potential conflicts and unnecessary deployments.
Requested Enhancement:
Add support for "NOT IN" or "Exclude group membership" logic within the Application Workspace targeting filters, so that we can define rules such as:
Deploy Adobe Reader if user is in groupAdobe-ReaderAND NOT IN groupAdobe-Acrobat-DC
Benefits:
Avoid software conflicts or unnecessary overwrites.
More precise application targeting.
Better alignment with real-world enterprise deployment scenarios.
| Product | Application Workspace |
Please contact me. This is not possible yet by assignments.
Sent from Outlook for iOS
Thank you for you request. This is already possible using context filters or dynamic user collections. Kindly refer the documentation https://docs.liquit.com/docs/user-membership