# Configure LDAP Autentication using group **URL:** \ **Category:** Icinga Web\ **Tags:** ldap\ **Created:** [March 18, 2021, 9:27am UTC](https://community.icinga.com/t/configure-ldap-autentication-using-group/6938 "2021-03-18T09:27:12Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![ejfv](https://community.icinga.com/user_avatar/community.icinga.com/ejfv/32/3203_2.png) [@ejfv](https://community.icinga.com/u/ejfv)\ **Post date:** [March 18, 2021, 9:27am UTC](https://community.icinga.com/t/configure-ldap-autentication-using-group/6938/1 "2021-03-18T09:27:12Z")
Hi, We want to configure autentication using ldap and assing a role to each user based on member-of ldap field. It is posible in icinga? Can anyone help us ? Best regards, Emilio J. ---
**Author:** ![theFeu](https://community.icinga.com/user_avatar/community.icinga.com/thefeu/32/7277_2.png) [@theFeu](https://community.icinga.com/u/theFeu)\ **Post date:** [March 19, 2021, 8:10am UTC](https://community.icinga.com/t/configure-ldap-autentication-using-group/6938/2 "2021-03-19T08:10:32Z")
Heyhey, this is what I found in the docs, maybe those could be a starting point? [Resources - Icinga Web 2](https://icinga.com/docs/icinga-web-2/latest/doc/04-Resources/#ldap) and [Authentication - Icinga Web 2](https://icinga.com/docs/icinga-web-2/latest/doc/05-Authentication/) ---
**Author:** ![ejfv](https://community.icinga.com/user_avatar/community.icinga.com/ejfv/32/3203_2.png) [@ejfv](https://community.icinga.com/u/ejfv)\ **Post date:** [March 22, 2021, 2:52pm UTC](https://community.icinga.com/t/configure-ldap-autentication-using-group/6938/3 "2021-03-22T14:52:58Z")
Hi, I have finally managed to configure it. Need to do three steps: 1. Import Users from LDAP ( Configuration → Application → Authentication → User backend ) 2. Import Groups from LDAP. (in previous page choose User Group Backend) Key point is LDAP Group Member Attribute that define whitch user are in this group 3.- Define roles. (Configuration → Autentication → Roles ) The problem is that for each module the way to restrict the object that a role can use is diferent: A.- Monitoring: you can fill monitoring/​filter/​objects with a value like \_host\_tenant=AAA B.- director: you must include host in hostgroup and use director/​filter/​hostgroups Best regards, Emilio J. ---
**Author:** ![chanti](https://community.icinga.com/letter_avatar_proxy/v4/letter/c/7ea924/32.png) [@chanti](https://community.icinga.com/u/chanti)\ **Post date:** [May 21, 2021, 1:34pm UTC](https://community.icinga.com/t/configure-ldap-autentication-using-group/6938/4 "2021-05-21T13:34:20Z")
Hello Emilo, I am at the same point with less success. Can you clarify with some examples the points 2 and 3? I managed to load the groups from AD, but inside the group are not users but roles. > group\_member\_attribute : LDAP attribute where a group’s members are stored. > Defaults to `member`. What did you use here? How can I assign groups from the AD to the Roles in Icinga? Saludos/ Regards, Christian ---
**Author:** ![theFeu](https://community.icinga.com/user_avatar/community.icinga.com/thefeu/32/7277_2.png) [@theFeu](https://community.icinga.com/u/theFeu)\ **Post date:** [July 15, 2021, 1:45pm UTC](https://community.icinga.com/t/configure-ldap-autentication-using-group/6938/5 "2021-07-15T13:45:00Z")
Hey @chanti, a late welcome to the forum Please open a new topic for issues that you are experiencing. If you comment under older topics, especially if they have been solved already, chances are that your message will be overlooked (like it probably has been) are pretty high. You can always link back to the relating topic by just adding a link to it in the description. I hope you managed to resolve your issue by now, if now - feel free to open a new topic!