diff options
author | Pavel Shutsin <pshutsin@gitlab.com> | 2019-06-06 23:00:31 +0300 |
---|---|---|
committer | Pavel Shutsin <pshutsin@gitlab.com> | 2019-06-13 20:29:23 +0300 |
commit | 7b1b66416b5287e5e5f928a276440d9b1e4badb5 (patch) | |
tree | 4c68e8f04a0e40b0bc36614318c5af1f4caba2ed /doc/administration | |
parent | 63e565153149eb740c08407649ea35a2ed4d128e (diff) |
EE port: add app-wide LDAP membership lock field
Diffstat (limited to 'doc/administration')
-rw-r--r-- | doc/administration/auth/ldap-ee.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/administration/auth/ldap-ee.md b/doc/administration/auth/ldap-ee.md index 30095d35705..15f093bb62d 100644 --- a/doc/administration/auth/ldap-ee.md +++ b/doc/administration/auth/ldap-ee.md @@ -183,6 +183,15 @@ group, as opposed to the full DN. 1. [Restart GitLab][restart] for the changes to take effect. +## Global group memberships lock + +"Lock memberships to LDAP synchronization" setting allows instance administrators +to lock down user abilities to invite new members to a group. When enabled following happens: + +1. Only administrator can manage memberships of any group including access levels. +2. Users are not allowed to share project with other groups or invite members to a project created in a group. + + ## Adjusting LDAP user sync schedule > Introduced in GitLab Enterprise Edition Starter. |