A developer has asked for a service account that can update the membership list of a few groups.
I would normally give the service account a role or add it as a manager or secondary owner who can update the membership list. Then have the developer install the management shell and show them how to connect to ARS and use the quest cmdlets to perform the operation. This is a JAVA app that is running on Linux so he can't install the management shell or the ADSI Provider.
Is there some other way that I could accommodate this request?
