Skip group replication | Feature Requests

Skip group replication

Felix

I have implemented group replication via building blocks. I want my Azure Subscriptions to skip group replication to Entra, because otherwise the Subscription replication and building blocks fight over the same groups.

June 14, 2024

Johannes Rudolph

Update: AWS platforms can now disable IAM replication in meshStack v2026.20.0

We have shipped a related capability for AWS and are still considering this for Azure. The AWS configuration already had a concept for configuring the IAM replication mode and it was therefore more straightforward to implement there. We are keeping track of this though, as we think it makes sense to have such a config option for every platform with native meshStack support via the replicator.

Here's the details:

AWS platforms can now use the new IAM type
None
to keep account provisioning in meshStack while skipping IAM permission and group replication in meshStack v2026.20.0.
This is useful if you want meshStack to manage AWS account lifecycle but handle access control outside of IAM Identity Center.

Jelle den Burger

Quick update that we are very aware of the need, but it didn't make the cut yet for the upcoming roadmap.

Jelle den Burger

We don't have this planned for the remainder of the year but are currently investigating if we can provide this in Q1 next year. We will get back to you!

Rebecca

Thank you so much for taking the time to share your idea! We can understand that you want to handle the group replication yourself. Can you please let us know why you decided to not use the meshStack group replication. Feel free to share the canny link with others to receive more votes for your idea.

Thomas Abbe

Hi Rebecca,

we have actually 2 use cases:

Group replication to other Azure tenant independant of Azure subscription management
Group replication to the platform Azure tenant. This is actually done via the hidden Global marketplace replicator. Unfortunately the global marketplace replicator does not support federated workload identities. In addition we would need some more replication features like Entra ID Administrative Units or Azure Privileged Identity Management.