# SG ldap authorization

**URL:** <https://forum.search-guard.com/t/sg-ldap-authorization/1854>\
**Category:** Search Guard\
**Created:** [June 9, 2020, 8:09am UTC](https://forum.search-guard.com/t/sg-ldap-authorization/1854 "2020-06-09T08:09:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![HeiDri](https://avatars.discourse-cdn.com/v4/letter/h/7ba0ec/32.png) [@HeiDri](https://forum.search-guard.com/u/HeiDri)\
**Post date:** [June 9, 2020, 8:09am UTC](https://forum.search-guard.com/t/sg-ldap-authorization/1854/1 "2020-06-09T08:09:02Z")

</div>

Hi guys , i’m new to the SG community so lately i configured LDAP authentication and it works fine 😛 , but my problem is how to control what ldap users can see(dashboards,management,…) and what index can they read also.

any idea from i should start?

thank you in advance.

---

<div class="post-metadata">

**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\
**Post date:** [June 9, 2020, 4:30pm UTC](https://forum.search-guard.com/t/sg-ldap-authorization/1854/2 "2020-06-09T16:30:52Z")

</div>

Hi @HeiDri!  
You need to configure Search Guard to fetch the existing roles from your LDAP server. Here is the doc for you [LDAP Authorisation | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/active-directory-ldap-authorisation#active-directory-and-ldap-authorisation)

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [June 30, 2020, 4:31pm UTC](https://forum.search-guard.com/t/sg-ldap-authorization/1854/3 "2020-06-30T16:31:01Z")

</div>

Closed on June 30, 2020, 4:31pm UTC

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.