We have an on-premise Active Directory that is using Azure Active Directory Connect to synchronize User and Group objects to Azure AD/Office 365. Our organization is interested in beginning to use SharePoint but we are struggling to figure out the best way to leverage our existing Security Groups in Active Directory as a means of controlling access to SharePoint sites.
Which of these deployment scenarios is viable:
- Create a SharePoint site that the entire organization has access to, with discrete Document Library's within the site, each of which is access controlled by AD Security Groups.
- Create a discrete SharePoint site for each AD Security Group with Document Library's within the site where access control is inherited from the site.
Alternatively, is there a better way to achieve our objective stated above?