Open Custom Group management internal API's for Curators (or those with Admin Secret/Keys)
- GET .../gallery/api/usergroups/ --> Get all Groups
- POST .../gallery/api/usergroups/ --> Add new custom group
- POST .../gallery/api/usergroups/<GroupID>/members/ --> Add a group member
- Get .../gallery/api//usergroups/<GroupID>/ --> Get Group Details
If your server is on SAML, you can't leverage any AD group for granting access to resources. The new custom group feature is a help, but still requires you to manually add groups and member users, so it doesn't scale for large organizations (too much management overhead).
Having the internal APIs exposed would allow me to do my own group sync tool, synching members between Custom and AD groups of the same name.
As a server Admin, I'd like to be able to do via APIs all that I can do via the Server Admin UI. This other idea was recently accepted for opening the collections APIs for Admin, it would be great if both Collections and Groups management were opened on the same upcoming release.