# The IdentityVisibilityFilter object

An account-level rule that controls which identity provider groups are discoverable in directory
 search and group pickers when automatic identity management is enabled. Filters apply across all
 workspaces in the account.

 If no group filters are configured, all groups are visible. Otherwise, a group is visible if it
 or any of its transitive parent groups matches at least one rule. A group is also visible if it
 or any transitive parent group is already provisioned in the account. Local Databricks groups
 remain visible regardless of the filters.

 Only group filters can be created. Filters do not change provisioning or sign-in for users and
 service principals. Filters are immutable: to change a rule, delete it and create a new one.

## Attributes

- `name` (string, Public Preview, Output only, ID, Immutable)
  The resource name of the identity-visibility filter.
   Format: accounts/{account_id}/identity-visibility-filters/{identity_visibility_filter_id}
- `principal_type` (string, Public Preview, Immutable)
  The type of principal this rule applies to. Set to `GROUP` when creating a filter.
   Other principal types are not supported for creation.
  Possible values:
  - `USER`
  - `SERVICE_PRINCIPAL`
  - `GROUP`
- `exact` (object, Public Preview, Immutable)
  Exact match on the group's external ID from the identity provider.
  - `external_id` (string, Public Preview, Immutable)
    The identity provider's external ID for the group to match. This is not the Databricks group ID.
     The value must be non-empty and is matched exactly, including case.
- `prefix` (object, Public Preview, Immutable)
  Case-sensitive starts-with match on the group's display name.
  - `display_name_prefix` (string, Public Preview, Immutable)
    The display-name prefix to match. Must contain at least one non-whitespace character.
     Leading and trailing whitespace are preserved, and matching is case-sensitive.

## Example

```json
{
  "name": "string",
  "principal_type": "USER",
  "exact": {
    "external_id": "string"
  },
  "prefix": {
    "display_name_prefix": "string"
  }
}
```