Server: Give admin rights to a specific LDAP group

[DBLouis]

My users are stored in an LDAP directory and I want to give admin permissions to some of them. I could manually put them in the default admin group of nextcloud but it would be more efficient to be able to select a group from LDAP as admin group. Could that be implemented?

[MorrisJobke]

I guess this is not possible, right @blizzz

[blizzz]

Not OOTB.

In 13 it is possible with a custom group backend, since https://github.com/nextcloud/server/pull/5571 was merged.

The LDAP Backend could be extended with providing the feature (pull requests welcome), it could also be considered for inclusion in #5321 (or a followup PR)

[xundeenergie]

This is also, what i need!

+1

[JoeKun]

I need this feature as well. Seems like one of the first thing anyone will bump against after configuring LDAP authentication for Nextcloud.

[gregharvey]

This would be nice, we also use Redmine which has this feature - you can specify the LDAP group containing your superusers and centrally control everything. +1 :-)

[FunkenTom]

I'm also looking for that feature.
As the LDAP Module handles the groups right, it would be in general a great idea/option if we can assign admin rights to a specific group.

+1

[blizzz]

For transparency, I will not have any time (not so soon) as being busy with different tasks/priorities. To get this implemented, the realistic options are to:
a) develop this feature and open a pull request
b) get in contact with Sales

[MorrisJobke]

As this sounds like a nice feature, the requests for this are quite low. Currently there are no plans to implement such a feature. Thus I will close this ticket for now. This does not mean we don't want this feature, but it is simply not on our roadmap for the near future. If somebody wants to implement this feature nevertheless we are happy to assist and help out.

If you wish to have this feature implemented by the Nextcloud GmbH there is the option for consulting work on top of your Nextcloud Enterprise subscription to get your features implemented.

[alkanna]

Hey, any plans to add this to the roadmap?

[blizzz]

Nope, https://github.com/nextcloud/server/issues/6428#issuecomment-487942872 is still valid

[TheDevilDan]

Hi,

What a pity, I think that many companies do not decide to take NextCloud because it does not meet the specifications of rights management (ACL) by AD with groups, it is a pity, we who wanted to administer this product with a group of administrator in the AD . Too bad...

[abctaylor]

You're potentially selling your product short my choosing not to make a very simple and basic change per what @TheDevilDan said. I suggest for you reconsider and add this to the base of the public tree and also your commercial GmbH stuff.