{
  "schema_version": 2,
  "id": "operate/rs/security/access-control/ldap/map-ldap-groups-to-roles",
  "title": "Map LDAP groups to roles",
  "url": "https://redis.io/docs/latest/operate/rs/security/access-control/ldap/map-ldap-groups-to-roles/",
  "summary": "Describes how to map LDAP authorization groups to Redis Software roles using the Cluster Manager UI.",
  "tags": [
    "docs",
    "operate",
    "rs"
  ],
  "last_updated": "2026-10-01T15:48:36+01:00",
  "page_type": "content",
  "content_hash": "4143c367b522d932f50c3edd4eb4775b35099ddbfc525b6382b19d75e1be6432",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "Redis Software uses a role-based mechanism to enable LDAP authentication and authorization.  \n\nOnce LDAP is enabled, you need to map LDAP groups to Redis Software access control roles."
    },
    {
      "id": "map-ldap-groups-to-roles",
      "title": "Map LDAP groups to roles",
      "role": "content",
      "text": "To map LDAP groups to access control roles in the Cluster Manager UI:\n\n1. Select **Access Control > LDAP > Mapping**.\n\n    > [!NOTE]\n    > You can map LDAP roles when LDAP configuration is not enabled, but they won't have any effect until you [configure and enable LDAP](https://redis.io/docs/latest/operate/rs/security/access-control/ldap/enable-role-based-ldap).\n    >     \n\n    ![Enable LDAP mappings Panel](https://redis.io/docs/latest/images/rs/access-control-ldap-mappings-panel.png)\n\n1.  Select the **+ Add LDAP Mapping** button to create a new mapping and then enter the following details:\n\n    | _Setting_ | _Description_ | \n|:----------|:--------------|\n| **Name** | A descriptive, unique name for the mapping |\n| **Distinguished Name** | The distinguished name of the LDAP group to be mapped.  <br/>Example: `cn=admins,ou=groups,dc=example,dc=com` |\n| **Role** | The Redis Software access control role defined for this group |\n| **Email** | _(Optional)_ An address to receive alerts|\n| **Alerts**  | Selections identifying the desired alerts. |\n\n    ![Create LDAP mapping dialog](https://redis.io/docs/latest/images/rs/screenshots/access-control/7-22-updates/ldap-mappings-add.png)\n\n1.  When finished, select the **Save** button.\n\nCreate a mapping for each LDAP group used to authenticate and/or authorize access to Redis Software resources.\n\nThe scope of the authorization depends on the access control role:\n\n- If the role authorizes admin management, LDAP users are authorized as cluster management administrators.\n\n- If the role authorizes database access, LDAP users are authorized to use the database to the limits specified in the role.\n\n- To authorize LDAP users to specific databases, update the database access control lists (ACLs) to include the mapped LDAP role."
    },
    {
      "id": "more-info",
      "title": "More info",
      "role": "content",
      "text": "- Enable and configure [role-based LDAP](https://redis.io/docs/latest/operate/rs/security/access-control/ldap/enable-role-based-ldap)\n- Update database ACLs to [authorize LDAP access](https://redis.io/docs/latest/operate/rs/security/access-control/ldap/update-database-acls)\n- Learn more about Redis Software [security and practices](https://redis.io/docs/latest/operate/rs/security)"
    }
  ],
  "examples": []
}