[GH-ISSUE #109] Feature Request: Authentication based on AAD group, instead of role management invites #65

Closed
opened 2026-03-02 12:03:34 +03:00 by kerem · 5 comments
Owner

Originally created by @KelvinTegelaar on GitHub (Oct 25, 2021).
Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/109

Originally assigned to: @KelvinTegelaar on GitHub.

Is your feature request related to a problem? Please describe.
Currently we are using the built-in invite system for AAD, this has some limitations such as a maximum amount of users, and also you have to manually invite users instead of just granting them access.

Describe the solution you'd like
I'd like to create a new Azure AD group as part of our ARM template. This group will be allowed to use CIPP, e.g. "CIPP Users" and "CIPP Administrators". Users in these groups can use the application at will, and it will be easier for administrators to revoke access.

To do this, we'll need follow: https://docs.microsoft.com/en-us/azure/static-web-apps/authentication-authorization?tabs=function#role-management

Originally created by @KelvinTegelaar on GitHub (Oct 25, 2021). Original GitHub issue: https://github.com/KelvinTegelaar/CIPP/issues/109 Originally assigned to: @KelvinTegelaar on GitHub. **Is your feature request related to a problem? Please describe.** Currently we are using the built-in invite system for AAD, this has some limitations such as a maximum amount of users, and also you have to manually invite users instead of just granting them access. **Describe the solution you'd like** I'd like to create a new Azure AD group as part of our ARM template. This group will be allowed to use CIPP, e.g. "CIPP Users" and "CIPP Administrators". Users in these groups can use the application at will, and it will be easier for administrators to revoke access. To do this, we'll need follow: https://docs.microsoft.com/en-us/azure/static-web-apps/authentication-authorization?tabs=function#role-management
kerem 2026-03-02 12:03:34 +03:00
Author
Owner

@KelvinTegelaar commented on GitHub (Oct 25, 2021):

This feature is still fairly low priority, and assumed we'll work on this somewhere around v1.5

<!-- gh-comment-id:950719252 --> @KelvinTegelaar commented on GitHub (Oct 25, 2021): This feature is still fairly low priority, and assumed we'll work on this somewhere around v1.5
Author
Owner

@KelvinTegelaar commented on GitHub (Oct 29, 2021):

Actually closing this for now, will be done with more authentication overhaul.

<!-- gh-comment-id:954507756 --> @KelvinTegelaar commented on GitHub (Oct 29, 2021): Actually closing this for now, will be done with more authentication overhaul.
Author
Owner

@KelvinTegelaar commented on GitHub (Nov 1, 2021):

Started with preparations for new permissions management.

<!-- gh-comment-id:956547196 --> @KelvinTegelaar commented on GitHub (Nov 1, 2021): Started with preparations for new permissions management.
Author
Owner

@KelvinTegelaar commented on GitHub (Nov 4, 2021):

first implementation of the rights management system is active in dev.

<!-- gh-comment-id:960588220 --> @KelvinTegelaar commented on GitHub (Nov 4, 2021): first implementation of the rights management system is active in dev.
Author
Owner

@KelvinTegelaar commented on GitHub (Nov 5, 2021):

closing this, opening new one for AAD integration.

<!-- gh-comment-id:961789108 --> @KelvinTegelaar commented on GitHub (Nov 5, 2021): closing this, opening new one for AAD integration.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/CIPP#65
No description provided.