ignore default admin group

DefGuard · Dec 12, 2024 · 8b4671d · 8b4671d
1 parent 3046c58
commit 8b4671d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/enterprise/directory_sync/mod.rs b/src/enterprise/directory_sync/mod.rs
@@ -228,7 +228,9 @@ async fn sync_all_users_groups<T: DirectorySync>(
             continue;
         };
 
-        let current_groups = user.member_of(&mut *transaction).await?;
+        let mut current_groups = user.member_of(&mut *transaction).await?;
+        // We may not want to touch the default admin group
+        current_groups.retain(|g| g.name != "admin");
         debug!(
             "User {} is a member of {} groups in Defguard: {:?}",
             user.email,