Skip to content

LDAP member permission override in API

Description

Issue #343 (closed) ("Allow option to change permission levels of users when LDAP group sync is enabled") and MR !822 (merged) ("Override LDAP members permissions") added the ability to override LDAP group permissions for a particular group member.

This is currently possible from the Web Interface, but not from the GitLab API.

The current behaviour is that if a member's access_level is changed from the API, then the next time the LDAP sync runs the access_level is changed back again to the LDAP access level.

Using the web interface sets an override flag on the member which stops the LDAP sync from changing the access_level.

Proposal

Provide a means of overriding LDAP member permissions from the GitLab API. One easy way of achieving this is by exposing the override flag in the API.

Links / references