Feature Suggestion - Allow AD users to be added to built-in groups

[kc_2466]

It would be useful to allow Active Directory users to be added to built in groups, so that group management can be controlled locally within ProGet.

[atripp]

Hi @kc_2466,

Thanks for the suggestion; we've had this request in the past but don't believe it's a good fit.

It ought to be trivial to add a group to the AD/LDAP server, so it doesn't make sense to add a "quasi-group" feature on the ProGet end. That would increase complexity and could introduce unbehavior that is challenging to support and troubleshoot.

We haven't seen other products doing something like this, likely for these reasons.

Cheers,
Alana

[kc_2466]

The reason it's desirable is that although it's easy to get AD groups added, they are administered by a central department within the company, so each time we wish to add or remove somebody from a ProGet group, the change has to be requested, and this takes some time.

Other products we use such as TeamCity and Jira allow this. Also the system we used before ProGet allowed it :-)

[atripp]

Hi @kc_2466 ,

Understood, that was the same reason given before.

Our products' AD/LDAP integration works different than JIRA/TeamCity (live lookup vs sync) so it's just not that simple.

We're not willing to add complexity to work-around "dumb" organizational policies -- what you described is the whole point of AD/LDAP (centrally administered access).

It's possible to delegate group administration in AD, but if they don't want to do that... I guess they are okay with you just creating less-secure built-in users until they get around to completing their tickets ;)

Thanks,
Alana