---
path: administration/ldap-settings/additional-settings.mdx
title: Additional settings
slug: additional-settings
pagination_next: null
pagination_prev: null
sidebar_position: 8
description: >-
  LDAP settings configured on the application server, not through the web interface.
keywords:
  - Passwork
  - LDAP
  - Configuration
  - Advanced
  - LDAP server
---

:::warning
This setting is intended for specific cases where standard LDAP filters are not sufficient. Filtering with regular expressions on large data sets may reduce performance.
:::

`LDAP_GROUP_ADDITIONAL_FILTER` allows additional filtering of LDAP groups using a regular expression. Key details:

- **Scope** — the regular expression is applied to the final result of the LDAP group loading process.
- **What is filtered** — the regular expression is applied only to the final group name (for example, `secops`), not to the full DN string (`CN=secops,OU=Groups...`).
- **Syntax** — standard PHP regular expressions (PCRE) are used.
- **Delimiters** — the pattern must be wrapped with delimiter characters (for example, `#`). The opening and closing delimiter must match.
- **Enabling** — set the filter value in `LDAP_GROUP_ADDITIONAL_FILTER` in the `config.env` configuration file.

### Examples

Exact match:

<Tabs className="tabs-container">
  <TabItem className="tab-item-container" value="shell" label="shell">

  ```shell
  LDAP_GROUP_ADDITIONAL_FILTER=#^secops$#
  ````

  </TabItem>
</Tabs>

Filtering by prefix:

<Tabs className="tabs-container">
  <TabItem className="tab-item-container" value="shell" label="shell">

  ```shell
  LDAP_GROUP_ADDITIONAL_FILTER=#^prod-.*#
  ```

  </TabItem>
</Tabs>

Case-insensitive filter:

<Tabs className="tabs-container">
  <TabItem className="tab-item-container" value="shell" label="shell">

  ```shell
  LDAP_GROUP_ADDITIONAL_FILTER=#^admin$#i
  ```

  </TabItem>
</Tabs>