AD linked Group in G Suite

[localzuk]

I want to set up a group in G Suite, sync'ed from AD that has all our staff as members. However, I only want a small list of people to be able to email the list, so I need to set them up as managers and give only the managers rights to post. BUT if I do this, when GCDS runs it strips their group role, and resets them to members again.

 

How can I set up this group to sync automatically, but also have custom role assignments to people in the group?

[localzuk]

So, to answer my own question - updating to a later version of GCDS added an option that prevents the sync deleting roles or groups that aren't in AD.

[caffrey]

Thanks for that, just realised how old my version was - updating fixed a few errors I had syncing...

[gh5000]

So, to answer my own question - updating to a later version of GCDS added an option that prevents the sync deleting roles or groups that aren't in AD.

Good to know.

 

I have it setup that the owner (or maybe the manager) attribute in GCDS is mapped to the wbemPath AD attribute. Not the easiest thing to update but it wasn't overwritten by GCDS previously!

 

Google just need to add a way of restricting it to a group of users that aren't in the group. E.g. only allow governors@ group to receive emails from the slt@ group (and governors@). Don't think that is currently possible.