03/26/2020 18 People found this article helpful 450,557 Views
The group filter is designed for admin to select which user’s mailbox are getting scanned. There are two types of groups supported, user group and distribution list. Each mailbox (user) will need to have a valid license assigned by the system automatically and alphabetically. When using CAS – SaaS Security (not using group filter feature) if the number of users defined by the group exceeds the number of licensed users, system decides to choose the users for the unassigned licenses and apply for the next available user in alphabetical order.
EXAMPLE: If there are 50 user licenses among which you have used 25 licenses, rest of the 25 licenses are getting applied automatically by the system from alphabetical order. If any of those licenses are unchecked, then the system will apply to the next available user in alphabetical order. The suggested solution is to use Group Filter to avoid licenses are getting applied automatically by the system from alphabetical order.
NOTE: It’s an expected behavior if you are not using “Group Filter” feature on CAS – SaaS Security.
Group filter can be configured either during onboarding process or editing the policy rules under policy tab.
NOTE: If a customer does not utilize the Group Filter option, all O365\G Suite users will be brought in as CAS users. CAS licenses will be assigned automatically alphanumerically until the CAS license count is fully utilized. These can be reassigned as necessary by the customer.
Only one Group can be specified in Group Selection at the moment. And If you make any configuration change under Group Filter post onboarding a SaaS application it may take some time to complete depending on size of the group. User synchronization (add and remove users from the group) will take up to 12 hrs. Mailbox scan for those newly added/removed users will only take effect after user synchronization is complete.
TIP: When on-boarding O365 or G Suite, always use group filter instead of All Organization.