Groups: Allow group admins to assign existing users

[TomTurnschuh]

Group administrators can add and delete users in the group they have admin privileges for. This can lead to multiple users for the same person, as a group admin creating a new user may not know that there already exists such a user – and if he knows, he cannot assign it to his group.

I would suggest that group administrators can only or additionally assign existing users to the group they have admin privileges for.
For this group administrator needs to access the list of all users. However, the visible information can be limited to user and display name and potentially group memberships.

[TomTurnschuh]

This proposal is related to (but not duplicate of) #7482.

[WingsLikeEagles]

This is a very important feature. What's the purpose of having a group admin if they can't change group membership?

[hansimausisteffiwurstbrot]

In our case I don't want group admins to be able to add any existing user to their group due to privacy reasons.

Might be handled as a configurable option?

[ZeikoFr]

This feature is clearly needed.

I think the best thing to do is :

Allow group admin to add only user that are already existing in the Nextcloud.

But we should also have an option to restrict this option to some user like a button "Can be added to other group by group admin" To avoid human mistakes (Like HR group admin adding a user that is not related to HR in is group).

[munrobasher]

Yes, this seems a rather strange thing to be missing - I'm a manager of "IT support members" group and I can remove users but I can't add existing ones.

[WingsLikeEagles]

Ping, would be helpful to see this feature added.

[tech-nickel]

Same for us. I think it's not the way it should be to allow Group admins to add completely new users to the instance on a global level. Only existing user should be available to add to the group.

[geonom]

Can only support this, would be greatly useful to us as a group with about 300 users at least, if group admins could help with adding and removing existing users from groups on their own without needing a general admins account with all the dangerous priviledges.

[walhallaRV]

Group administrators can add and delete users in the group they have admin privileges for. This can lead to multiple users for the same person, as a group admin creating a new user may not know that there already exists such a user – and if he knows, he cannot assign it to his group.

I would suggest that group administrators can only or additionally assign existing users to the group they have admin privileges for. For this group administrator needs to access the list of all users. However, the visible information can be limited to user and display name and potentially group memberships.

Yes, I agree. Absolutely necessary / essential for bigger Groupware / Workgroup - Servers. May be that there should be the option do deactivate for privacy reasons. I agree too. But as it is, it is really pain in the ...

Group admin can't create new groups, nor add (existing) users to the group. So he has to borrow the Super Admin like: "Oh, please can you create a new group named "Test" and add this 250 users to the group, please!" GREAT!

But really the best: the Superadmin can not simply add the users to the group. NO, he has to edit every single user, has to add 250 times manually the group to the 250 users! Really a pity and not usable for greater groups :(

[munrobasher]

For all it's foibles, this is one area where Microsoft 365/SharePoint scores. I've taken the time to write a PowerShell script to create a script to manage M365 groups - create them and add/remove users based on a CSV. A life saver for large systems. Does Nextcloud API have anything similar?

[joshtrichards]

@munrobasher

• The User Provisioning API: https://docs.nextcloud.com/server/latest/admin_manual/configuration_user/user_provisioning_api.html
• The occ group commands: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/occ_command.html#group-commands
• The occ user commands: https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/occ_command.html#user-commands