Hybrid AAD join local group policy

Question

Hi,

I need to know if it is possible to add permission on a given folder for a single AAD user only . let's say that I have a folder that I want to make it readable only by admins and user_1. I can't choose any of my users or group from the azure active directory (only I can choose admin users). How can I make the AAD users and groups visible to set permission properly. I have the same issue with local strategy groups.

Is it possible to force it using script? I mean to connect to azure and force local permissions (same for local GPO)

Thanks

Answer 1

@mehar

Thank you for posting your query on Microsoft Q&A. From you statement above I did got the following conclusion for your objective:

Give shared folder access to Azure AD (Cloud only) users/group.

There is no direct way to do it. You may try the following:

• Sync Cloud users groups using groupwriteback feature of AAD connect.
• This should allow the user in security group to be synced on-prem.
• Then you may try to give access to specific file share.

I would recommend to test this for a small group of 2-5 users before deploying in production as this is still in preview.

Still, if this does not meet the requirement then I would recommend to have a feedback posted here, as this is monitored by our product group team

Please do let me know if you have any further queries in the comments section.

Thanks,

Akshay Kaushik

Please "Accept the answer" (Yes/No), and share your feedback if the suggestion works as per your business need. This will help us and others in the community as well.