mangle icon indicating copy to clipboard operation
mangle copied to clipboard

Integration of AD groups into mangle instead of users

Open sowjanya-eks opened this issue 2 years ago • 2 comments

Hello Mangle team, @rpraveen-vmware

Would it be possible to integrate AD groups into mangle instead of just users? With LDAP integration under AUTH source, we are able to login with our Company's ID.

It is likely that many teams in our organization are likely to use mangle. Hence, the request for you to include the capability of integrating AD groups as well. This will reduce of overhead of managing the users.

To give an example, we will create a AD group "mangle_roleuser_gg" and all users under this group should be able to get the role_user privilege.

Please let us know if this is possible to include in any of the future releases.

Thank you, Sowjanya

sowjanya-eks avatar Aug 18 '23 13:08 sowjanya-eks

I guess there are two ask here:

  1. LDAP integration.
  2. Role of persona as: Allow fault injection, hiding or not allowing add/update/delete endpoints, no access to config settings.

ranjansvmware avatar Aug 19 '23 15:08 ranjansvmware

we are able to do the LDAP integration and users are able to login to the mangle UI with their company issued id's.

Requirement:

As of now we're adding individual users and assigning privileges in the mangle UI. However, we want the users to be part of certain group "mangle_roleuser_gg" (as per the privilege, for example: role_user) so we can avoid adding and managing multiple users and roles. we're happy to discuss over the quick call if it's unclear. @rpraveen-vmware, @ranjansvmware

sowjanya-eks avatar Aug 21 '23 14:08 sowjanya-eks