Checking if user is in AD group

Question

One of the fields on list is User Picker where often are place AD groups.

Authentication is set up with claims.

While presenting the item, users which are in this AD groups (and others mentioned in this field), need to see an button. Other (which have permission to see this item but were not mentioned) should not.

How can I get information, whether user is in this AD group?

Answer 1

I use an extension method, like this:

 public static bool InGroup(this SPUser User, string GroupName)
    {
        return User.Groups.Cast<SPGroup>().Any(g => g.Name.ToLower() == GroupName.ToLower());
    }

Then call it like this:

bool inGroup = spuser.InGroup("GroupName");

Answer 2

You can get a flat transitive/recursive list of the user's AD security and O365 group memberships using this endpoint:

/_api/SP.Publishing.SitePageService.GetCurrentUserMemberships

Answer 3

Steps to find User belongs to AD Group.

• Create a SharePoint Group and add AD Group into SharePoint Group Use the below code to find user belongs to SharePoint Group or not

How to check if current user belongs to SharePoint group via CSOM (JavaScript):

function IsCurrentUserMemberOfGroup(groupName, OnComplete) {

    var currentContext = new SP.ClientContext.get_current();
    var currentWeb = currentContext.get_web();

    var currentUser = currentContext.get_web().get_currentUser();
    currentContext.load(currentUser);

    var allGroups = currentWeb.get_siteGroups();
    currentContext.load(allGroups);

    var group = allGroups.getByName(groupName);
    currentContext.load(group);

    var groupUsers = group.get_users();
    currentContext.load(groupUsers);

    currentContext.executeQueryAsync(OnSuccess,OnFailure);

    function OnSuccess(sender, args) {
        var userInGroup = false;
        var groupUserEnumerator = groupUsers.getEnumerator();
        while (groupUserEnumerator.moveNext()) {
            var groupUser = groupUserEnumerator.get_current();
            if (groupUser.get_id() == currentUser.get_id()) {
                userInGroup = true;
                break;
            }
        }  
        OnComplete(userInGroup);
    }

    function OnFailure(sender, args) {
        OnComplete(false);
    }    

}

Usage:

function IsCurrentUserHasContribPerms() 
{
  IsCurrentUserMemberOfGroup("Members", function (isCurrentUserInGroup) {
    if(isCurrentUserInGroup)
    {
        // The current user is in the [Members] group!
    }
  });

}
ExecuteOrDelayUntilScriptLoaded(IsCurrentUserHasContribPerms, 'SP.js');

Check if user is in a specified group