In our department we were longing for a REST API in order to be able to update group memberships. Although I saw that Active Directory sync is possible, our AD account's meta data doesn't fully reflect the institutional information required to map a user to a specific openiris group.
For this, we would need an endpoint allowing us to administer group memberships (adding/removing group membership). I am thinking either PUT (new "truth"/new list of members) or PATCH (add/remove individual users).