> Source: [sk31352](https://support.checkpoint.com/results/sk/sk31352)

# sk31352 - How to specify more than one attribute in the "Apply filter for dynamic group" field of an LDAP group

| Property | Value |
|----------|-------|
| Solution ID | sk31352 |
| Date Created | 2005-12-01 |
| Last Modified | 2018-09-07 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Solution

The "Apply filter for dynamic group" field inside an LDAP group object allows the administrator to specify one or more attributes that must be matched before the LDAP group is considered to be a match.   

For example, to configure the LDAP group so that it only matches users who have the title "manager" listed for them in the LDAP directory, you could specify that in the "Apply filter for dynamic group" field as follows:   

title=manager   

to specify more than one attribute, simply separate them with parenthesis as such:   

(title=manager)(company=somecompany)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content