AD Groups in Application Owners
Would be great to be able to add groups to application owners in AD instead of only users. Scenario is to use on-prem AD synced with Azure to keep management of application roles/groups/etc on-prem for cloud hosted solutions.
Thanks!
Xavier Kindermans
shared this idea
25 comments
-
Alex
commented
It would be nice in 2021 to be able to assign a Group as an owner of a service principal.
managing it manually is pain. -
Jins Thomas
commented
it would be great if we can add SPNs and Groups as owner for AD groups
-
John
commented
I agree, this would be an important feature to properly manage access to Azure apps as we create more in the future. It's hard for me to believe it wasn't already included.
-
Mike
commented
+1 for this, would be extremely helpful as we roll out more Azure apps for SSO.
-
Greg
commented
Critical for enterprise needs. Without this feature, app owners could potentially still have access after leaving the organization. Further, it reduces the amount of access auditing for departments to have a single point of adding/removing access for multiple apps.
-
Anonymous
commented
Vote this up
-
Mayur Deshpande
commented
Support for AD Groups as Application Owners is very important for us to implement governance controls.
-
Matthias Ritter
commented
I completely agree with Roman Greil.
This is absolutely essential for enterprise use. -
Roman Greil
commented
Must have requirement to make this enterprise ready.
-
Anonymous
commented
This is critical to managing application owner/service principals at scale
-
Brett Hinton
commented
This is critical to managing application owner/service principals at scale
-
Bolan, Richard
commented
-
Jan V.
commented
This would be great to have. For all other resources, we use AD-groups to abstract ownerships from the resource itself.
-
Tomas Planicka
commented
I believe this is support if you have any other AD version then "Free".
Per: https://azure.microsoft.com/cs-cz/pricing/details/active-directory/ -
Adam Coulter
commented
Any progress on this? Been under review for almost a year?
-
Anonymous
commented
This functionality is critical for businesses and organizations where a team of people manage an application.
-
Anonymous
commented
+1, we use this to integrate Jenkins for Subscription admin and Automation in Azure; it would be great to allow Apps to be owned by Groups, so that everyone on our team would be able to do things like rotate keys or debug integration issues
-
Jan
commented
Also need groups allowed as group owners.
-
Amanda Debler
commented
We definitely need this, because that's how we're assigning Azure roles (along with how we do things on-prem)
-
Peter Selch Dahl commented
This would be really great to have :) Thumbs Up