Is it possible to update group permissions based on user profile?

Question

In SharePoint 2013, is it possible to update group permissions based on user profiles? For example, we will have 50 team sites each with group permissions that each hold 10-50 users. Rather than manually managing all the team site groups (ie: people leaving, promoted, change team, etc.) I'd like to have the group permissions updated when their user profile changes (ie: deleted, changed team, on multiple teams).

Answer 1

SharePoint doesn't provide a out of the box way to do this by using SharePoint Groups.

I don't know your Active Directory structure but it is likely that you have matching groups already defined there. Those groups can be added to the team sites then. If something is changed in active directory this will reflect directly to the permissions in SharePoint.

The only downside of using Active Directory Groups is that you won't see the members directly in SharePoint.

For more information you please take a look at Kirk Evans blog:

Clarifying Guidance on SharePoint Security Groups versus Active Directory Domain Services Groups