# Mapping Super Administrators role to different groups

**URL:** <https://help.nextcloud.com/t/mapping-super-administrators-role-to-different-groups/60874>\
**Category:** ℹ️ Support\
**Tags:** authentication\
**Created:** [September 27, 2019, 9:06pm UTC](https://help.nextcloud.com/t/mapping-super-administrators-role-to-different-groups/60874 "2019-09-27T21:06:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Stephan\_Stachurski](https://help.nextcloud.com/user_avatar/help.nextcloud.com/stephan_stachurski/32/17888_2.png) [@Stephan\_Stachurski](https://help.nextcloud.com/u/Stephan_Stachurski)\
**Post date:** [September 27, 2019, 9:06pm UTC](https://help.nextcloud.com/t/mapping-super-administrators-role-to-different-groups/60874/1 "2019-09-27T21:06:21Z")

</div>

There are docs for “Granting administrator privileges to a user”  
[https://docs.nextcloud.com/server/14/admin\_manual/configuration\_user/user\_configuration.html#granting-administrator-privileges-to-a-user](https://docs.nextcloud.com/server/14/admin_manual/configuration_user/user_configuration.html#granting-administrator-privileges-to-a-user)

They say:

> **Super Administrators** have full rights on your Nextcloud server, and can access and modify all settings. To assign the **Super Administrators** role to a user, simply add them to the `admin` group.

I’m using SAML integration and I’ve configured nextcloud to use groups attribute mapping. This means that a user who signs in via SAML has their groups set equal to whatever the SAML payload says.

I want admins to authenticate via SAML, but I don’t want to have to create a group called “admin” in my identity provider and send that group to nextcloud.

I really would like to be able to have a group like “nextcloudadmin” or “storageadmin” in my identity provider, and if a user is a member of this group, they get super adminitrator privileges in nextcloud.

---

<div class="post-metadata">

**Author:** ![dweimer](https://help.nextcloud.com/user_avatar/help.nextcloud.com/dweimer/32/19564_2.png) [@dweimer](https://help.nextcloud.com/u/dweimer)\
**Post date:** [April 28, 2021, 7:18pm UTC](https://help.nextcloud.com/t/mapping-super-administrators-role-to-different-groups/60874/2 "2021-04-28T19:18:36Z")

</div>

Any chance you found a solution to this testing a new setup using o365 SAML2 and ran into this same issue. Groups show up as a UUID instead of name, which is annoying enough, and not being able to assign an admin since groups get overwritten at next login is kind of a deal breaker.

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 4, 2024, 10:32am UTC](https://help.nextcloud.com/t/mapping-super-administrators-role-to-different-groups/60874/3 "2024-12-04T10:32:06Z")

</div>



---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 11, 2024, 3:40pm UTC](https://help.nextcloud.com/t/mapping-super-administrators-role-to-different-groups/60874/4 "2024-12-11T15:40:53Z")

</div>


