# LDAP Authentication + Internal Authorization (backendroles)

**URL:** <https://forum.search-guard.com/t/ldap-authentication-internal-authorization-backendroles/859>\
**Category:** Search Guard\
**Created:** [April 9, 2018, 8:58am UTC](https://forum.search-guard.com/t/ldap-authentication-internal-authorization-backendroles/859 "2018-04-09T08:58:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arturo\_Penen\_Gomez](https://avatars.discourse-cdn.com/v4/letter/a/74df32/32.png) [@Arturo\_Penen\_Gomez](https://forum.search-guard.com/u/Arturo_Penen_Gomez)\
**Post date:** [April 9, 2018, 8:58am UTC](https://forum.search-guard.com/t/ldap-authentication-internal-authorization-backendroles/859/1 "2018-04-09T08:58:12Z")

</div>

Hi!

One question, can I enable the authentication through LDAP and group the LDAP users in sg\_internal\_users.yml?

Thanks.

---

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [April 9, 2018, 2:50pm UTC](https://forum.search-guard.com/t/ldap-authentication-internal-authorization-backendroles/859/2 "2018-04-09T14:50:53Z")

</div>

this is currently not possible sadly.

You can file a feature request in our github repo or you implement it yourself as a custom authorizer, see [Custom implementations | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/custom-authentication-modules#custom-authentication-modules)

> **···**
>
> > Am 09.04.2018 um 10:35 schrieb Arturo Penén Gómez \<apenen@gmail.com\>:
> > 
> > Hi!
> > 
> > I have a question, Can I enable ldap authentication and user internal authorization backendroles (for group ldap users)?
> > 
> > Thanks.
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups "Search Guard Community Forum" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.  
> > To post to this group, send email to search-guard@googlegroups.com.  
> > To view this discussion on the web visit [https://groups.google.com/d/msgid/search-guard/a54d77e5-9ffe-4fc1-b4a6-2cd64911d283%40googlegroups.com\](https://groups.google.com/d/msgid/search-guard/a54d77e5-9ffe-4fc1-b4a6-2cd64911d283%40googlegroups.com%5C).  
> > For more options, visit [https://groups.google.com/d/optout\](https://groups.google.com/d/optout%5C).