# AD Authentication Default Role

**URL:** <https://forum.inductiveautomation.com/t/ad-authentication-default-role/2411>\
**Category:** Ignition\
**Created:** [December 10, 2010, 12:15am UTC](https://forum.inductiveautomation.com/t/ad-authentication-default-role/2411 "2010-12-10T00:15:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![bhastie](https://avatars.discourse-cdn.com/v4/letter/b/d6d6ee/32.png) [@bhastie](https://forum.inductiveautomation.com/u/bhastie)\
**Post date:** [December 10, 2010, 12:15am UTC](https://forum.inductiveautomation.com/t/ad-authentication-default-role/2411/1 "2010-12-10T00:15:15Z")

</div>

I’ve got an AD/Database Hybrid authentication profile working now but was wondering if a new employee joins the company and logs in to the SCADA system without having roles assigned can I have them assigned a default access level?

---

<div class="post-metadata">

**Author:** ![Robert.McKenzie](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/robert.mckenzie/32/4134_2.png) [@Robert.McKenzie](https://forum.inductiveautomation.com/u/Robert.McKenzie)\
**Post date:** [December 10, 2010, 12:48am UTC](https://forum.inductiveautomation.com/t/ad-authentication-default-role/2411/2 "2010-12-10T00:48:24Z")

</div>

Yes, the default access level is no role. Any components/windows you haven’t added security to will work for them. This should be sufficient in most cases because no one will be able to log in at all unless they have AD credentials.

---

<div class="post-metadata">

**Author:** ![bhastie](https://avatars.discourse-cdn.com/v4/letter/b/d6d6ee/32.png) [@bhastie](https://forum.inductiveautomation.com/u/bhastie)\
**Post date:** [December 10, 2010, 4:56am UTC](https://forum.inductiveautomation.com/t/ad-authentication-default-role/2411/3 "2010-12-10T04:56:02Z")

</div>

Thanks Bobby