Map AD groups to co-admin roles
Like many large companies, we use AD groups for privileged roles like reporting and team management. There is no current way to map these AD groups into co-admin roles and the Box admin must set these manually.
This does not scale and is a major admin overhead for IT departments to have multiple places to administer something as simple as being able to generate reports or edit metadata templates.
![](https://secure.gravatar.com/avatar/b8a599c50143ff7cb83b69abcbb77cbc?size=40&default=https%3A%2F%2Fassets.uvcdn.com%2Fpkg%2Fadmin%2Ficons%2Fuser_70-6bcf9e08938533adb9bac95c3e487cb2a6d4a32f890ca6fdc82e3072e0ea0368.png)
This does sound like a huge burden for admins and I’d like to hear more about how you’d use existing AD groups to grant co-admin permissions. We are looking into extending our APIs to allow admins to set co-admin permissions, which may alleviate the pain of setting the permissions manually.
However, we don’t currently have any plans to take the AD groups and map them to co-admin permissions at this time.