Forum Discussion
SharePoint Security Group Maintenance
Hi Looking to see if there is an OOTB or plug-in option that can help in keeping membership of SharePoint Groups clean and tidy. Ideally, I'd like to be able to automatically remove a user from...
Vertebre85 Thanks for the guidance.
I will see about the Access Review however at a glance it's not offering the automation I was hoping for. We have people move around the business all the time. When they move from one department to another, it would be nice to have some automated maintenance to off-board their access to old team sites they no longer need. This has been an issue for 10+ years that I thought would have been remedied by now.
Hi Scott-EVT
I probably not understood correclty your question.
I can tell you how i've done it on my side to have groups to automatically adapt and grant access to sharepoint sites.
Please note that this feature require at least to have an Azure P1 for each members (not assigned, just the number of licences purchased should match the number of users concerned by that)
I create an office 365 group and modify it to be automatically populated based on several parameter ( active or not, department name...).
In my company, we have an HR tools that modify the department in active directory, then it's pushed to azure AD and therefore the department is adapted for the user.
As the group is dynamics, I don't have to modify anything and rights are granted or removed on a sharepoint site.
If you have several sharepoint sites that are concerned by the same group, you can reuse the group to grant access to other site.
In my experience, since 1 year, I only had to add 2 exeption ( 2 users that work in 2 differents departments on the same time but only allocated officialy to 1 department). As it's centralized, I don't have a lot to do.
Rules for dynamically populated groups membership - Azure AD | Microsoft Docs