# Monitoring\_user role does not work when assigned to AD-based role mapping

**URL:** <https://discuss.elastic.co/t/monitoring-user-role-does-not-work-when-assigned-to-ad-based-role-mapping/248489>\
**Category:** Kibana\
**Tags:** elastic-stack-monitoring, elastic-stack-security\
**Created:** [September 14, 2020, 8:34am UTC](https://discuss.elastic.co/t/monitoring-user-role-does-not-work-when-assigned-to-ad-based-role-mapping/248489 "2020-09-14T08:34:32Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![ahoffskov](https://avatars.discourse-cdn.com/v4/letter/a/a9adbd/32.png) [@ahoffskov](https://discuss.elastic.co/u/ahoffskov)\
**Post date:** [September 14, 2020, 8:34am UTC](https://discuss.elastic.co/t/monitoring-user-role-does-not-work-when-assigned-to-ad-based-role-mapping/248489/1 "2020-09-14T08:34:33Z")

</div>

When assigning the monitoring\_user role to a role mapping, where users assigned to the role are based on users from Active Directory, access is denied. The AD Users are also granted the Kibana\_admin role.

Using a local Kibana user and assigning the same roles, it works fine.

Is there a bug when it comes to AD-integration or is it a feature?

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [September 14, 2020, 11:46am UTC](https://discuss.elastic.co/t/monitoring-user-role-does-not-work-when-assigned-to-ad-based-role-mapping/248489/2 "2020-09-14T11:46:31Z")

</div>

How are you mapping the roles for AD users?  
This is the method in the docs: [https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-roles.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-roles.html)

---

<div class="post-metadata">

**Author:** ![ahoffskov](https://avatars.discourse-cdn.com/v4/letter/a/a9adbd/32.png) [@ahoffskov](https://discuss.elastic.co/u/ahoffskov)\
**Post date:** [September 14, 2020, 7:26pm UTC](https://discuss.elastic.co/t/monitoring-user-role-does-not-work-when-assigned-to-ad-based-role-mapping/248489/3 "2020-09-14T19:26:12Z")

</div>

I'm using the mapping tool in Kibana, assigning based on dn where cn=SamAccountName,dc=domainname,dc=tld

Access to spaces in Kibana is given the same way, which works

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 12, 2020, 7:26pm UTC](https://discuss.elastic.co/t/monitoring-user-role-does-not-work-when-assigned-to-ad-based-role-mapping/248489/4 "2020-10-12T19:26:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.