# Active Directory group issue

**URL:** <https://forum.inductiveautomation.com/t/active-directory-group-issue/110795>\
**Category:** Ignition\
**Created:** [September 19, 2025, 8:00pm UTC](https://forum.inductiveautomation.com/t/active-directory-group-issue/110795 "2025-09-19T20:00:20Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kathleen\_Anderson](https://avatars.discourse-cdn.com/v4/letter/k/ecd19e/32.png) [@Kathleen\_Anderson](https://forum.inductiveautomation.com/u/Kathleen_Anderson)\
**Post date:** [September 19, 2025, 8:00pm UTC](https://forum.inductiveautomation.com/t/active-directory-group-issue/110795/1 "2025-09-19T20:00:20Z")

</div>

We are in the process of implementing AD in Ignition, we have been doing user testing which was going fine until we encountered a strange issue. Users who have our AD group called ES-HMI-USER which should equal to our Viewer role in ignition. But these users are getting a FORBIDDEN ACCESS screen. I have the security levels in place and have confirmed the project properties are set right, but I am stumped on where to look next to help identify the issue. All the other groups we have seem to work fine. Any help would be appreciated. Thanks!