AD groups to manage sharepoint permissions

[Sydders01]

Hi All,

 

I am in the process of using AD connect to link our AD and office 365. I would like to manage SharePoint from the Active directory. Please kindly share tips on how best to do this.

 

Thanks

Edited September 7, 2021 by Sydders01

[psydii]

There are three groups per SharePoint site:

 

Owners

Members

Visitors

 

We make our AD "all staff" group a member of visitors on all staff related sites. We make the departmental AD group 'members' and the HoD/Admin person a member of the Owner group.

This ensures we never need to touch the site permissions again.

 

 

However this does not play so well with modern Office 365 Groups (aka universal groups). For these we skip the ad departmental/HoD piece and just use Teams/Office365 groups UI to add members - we can use the ad groups initially - but these just get expanded to list the current members and future changes are all manual.