Feature request: System role mapping

[kkiiskin]

In LDAP plugin settings there is a possibility to map certain LDAP contexts to system roles like Manager and Course Creator.

Could this be implemented in Azure AD integration too? For example based on O365 groups or user attributes.

[kkiiskin]

Any comment or progress on this?

Like I mentioned, it is a standard feature in LDAP authetication, so when transfering from LDAP->OIDC, you lose an important functionality that people are used to.

[tekhnee]

This is a solid request — but why limit it to LDAP databases? It would make sense to map a moodle_role OIDC attribute, regardless of the location of the user database (LDAP, KeyCloak, etc.).

[kkiiskin]

Hi @audrieMSFT

I see you have been assigned to this, do you think there will be progress? :)

[weilai-irl]

Hi @kkiiskin,

I can understand how LDAP does it - all manager or course creator users can be put into separate contexts. How do you have it done in your case? Are they put into different groups? In that case, is the request to assign system context roles to users from configured groups?

Regards,
Lai

[kkiiskin]

Hi @weilai-irl

having managers/course creators in specified M365 group would propably be the most convenient way, yes.

[rodrigolangella]

1 more vote to this.

Having to assign roles manually is not ideal.