AD Group Mapping Allow Use of Constraints
Currently, using AD groups is not equivalent to local Cerberus groups. When an AD group is mapped to a Cerberus group it only maps the virtual directories and access. It does not map constraints. (Refer to: Active Directory Mappings). This means that e.g. the IP allow list constraint can't be applied via an AD group.
For an enterprise install, it is expected that AD features provide equivalent features to the local users/groups.
Requested feature: Make AD group to local group mapping equivalent to local groups.
-
Hello Andrew,
Thank you for taking the time to submit this enhancement request. Our product team needs a bit more information around your ask here so we can properly scope and look into this. Could you please answer the following for us? I can then bundle it up and get it over to the appropriate teams, thanks!
- What is the problem that this feature would fix?
- Why is it a problem?
- Is there a workaround you currently have for this problem?
- Do you have a suggestion on how you would like to see the problem fixed?
- How big is the problem? Who is affected by this problem (End Users, Admins, etc.)?
0 -
Hi Connor,
- What is the problem that this feature would fix? 2 fold. It would align the AD group implementation with the local groups so that they are equivalent. It would fix the issue that constraints can't be applied via AD groups.
- Why is it a problem? The specific problem I am aiming to solve with this is the ability to restrict specific users/groups to only be able to access the SFTP server from specific locations. This facilitates an ability to restrict external vs. internal access.
- Is there a workaround you currently have for this problem? Applying the constraints by default. And then overwriting them on individual AD users. Requires managing the users in Cerberus and has to be done one-by-one.
- Do you have a suggestion on how you would like to see the problem fixed? Make constraints available for AD groups.
- How big is the problem? Who is affected by this problem (End Users, Admins, etc.)? Affects the ability to implement an intended solution. Workaround as above which is unideal.
0 -
Hello Andrew,
Thanks so much for taking the time to expand on your ideas here, I'll take this over to our product team and present it for their scoping. As soon as we have an update to provide, we'll reach out here, or through a ticket.
0
Please sign in to leave a comment.
Comments
3 comments