GroupCore

Description

GroupCore by Core365 Cloud is a powerful, IIS-hosted dashboard designed to simplify and centralize management of hybrid Active Directory (AD) and Microsoft Entra (Azure AD) groups.
Built for IT administrators and infrastructure teams, GroupCore eliminates the complexity of managing group memberships across environments by providing a single, secure interface with deep visibility, smart automation, and safe copy capabilities.

🚀 Key Features
🔍 Unified Group Visibility

View on-premises Active Directory and cloud-only Entra groups in dedicated, intuitive dashboards
Inspect group type, scope, description, creation date, and nested relationships
Quickly explore group membership chains and parent groups

👥 Advanced User & Group Search

Fast lookup of users and groups across hybrid environments
Easily compare access between users

🔁 Smart Access Copy (With Guardrails)

Preview copying access from one user to another before applying
Automatically categorizes:

✅ Groups to be added
⚠️ Already assigned groups
🔒 Blocked groups (protected, dynamic, or unsupported)

Prevents unsafe changes with built-in guardrails

🔐 Secure & Controlled Write Mode

Copy access safely with confirmation and full audit logging
Roll back changes using the built-in audit system

☁️ Microsoft Entra (Graph API) Integration

Read and manage supported cloud groups with Microsoft Graph
Supports Microsoft 365 groups and security groups
Blocks unsupported types (e.g., mail-enabled groups) to avoid conflicts

🛡️ Security by Design
GroupCore is built as a secure, internal admin tool, with enterprise-grade safeguards:

No data caching (Cache-Control: no-store)
Hardened security headers
Restricted API access (no wildcard CORS)
Server-side secret storage only
IIS Windows Authentication support
Role-based access via AD groups
Write operations require explicit enablement
Full audit logging and rollback capability

⚙️ Easy Deployment
Install in minutes on a domain-joined Windows Server using PowerShell:

IIS-hosted dashboard + API
Configurable ports and paths
Works with existing AD infrastructure
Supports read-only or full write mode installs

🎯 Ideal For

IT Administrators managing hybrid AD + Entra environments
MSPs and IT service providers
Organizations needing safe, auditable user access replication
Teams replacing manual group management workflows

📦 What You Get

GroupCore dashboard & API
Full hybrid group visibility + management features
Licensing integration
Audit logging with rollback
Ongoing updates and enhancements

⚠️ Requirements

Domain-joined Windows Server
IIS installed
Microsoft Graph API permissions (for cloud features)
Internal network deployment (not public-facing)

💡 Why Choose GroupCore?
✅ Save time managing complex group access
✅ Reduce errors with guided automation
✅ Improve security with guardrails and audit logs
✅ Gain full visibility across hybrid identity environments