Forum Discussion
Can i manage Sharepoint Online Permissions with AD?
Morning.
We use Office 365 with a hybrid set up. We create our Security / distribution gruops in our On prem Exchange which then syncs to O365. I want to use Security groups in our On prem AD to control security groups in SharePoint online.
When i try to add people to SPO groups (members, owner, visitor o a new created group) i can only see individual users, or already existing SharePoint sites.
I read in different forums people is able to do it but haven't been able to find how to do it.
If anybody has any information please...
thank you
5 Replies
- Yes, but you need to sync your local AD with Azure AD through Azure AD Connect
- Thank you for the info. that is what we expected.
Can you recommed any literature or pages with information on how to best manage security / access / permission groups in sharepoint? there are some many different opinions that i am getting a bit confuse (to create my onw user groups or use Member / owner groups in sharepoint for example) thank youThe Sharing functionality in SharePoint/OneDrive/Teams uses SharePoint Security Groups to give people access to items that have been shared. It creates a new SharePoint Security Group every time a new Sharing link is created for an item. You might want to consider that before you spend too much time worrying about SharePoint permissions in the first place.
However, if you are going to try using AD security groups to manage access and permissions to SharePoint sites, one good approach is to use a combination of SharePoint Security Groups plus AD Security Groups inside of those SharePoint Security Groups.
For example, every SharePoint site comes with three SharePoint Security Groups - Owners (Full Control), Members (Edit), and Visitors (Read). You should put your AD Security groups inside one of these default SharePoint Security Groups.
