# AD Database Hybrid update user roles modify

**URL:** <https://forum.inductiveautomation.com/t/ad-database-hybrid-update-user-roles-modify/81078>\
**Category:** Ignition\
**Tags:** perspective\
**Created:** [October 27, 2023, 6:35am UTC](https://forum.inductiveautomation.com/t/ad-database-hybrid-update-user-roles-modify/81078 "2023-10-27T06:35:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![r.lebohec](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/r.lebohec/32/3704_2.png) [@r.lebohec](https://forum.inductiveautomation.com/u/r.lebohec)\
**Post date:** [October 27, 2023, 6:35am UTC](https://forum.inductiveautomation.com/t/ad-database-hybrid-update-user-roles-modify/81078/1 "2023-10-27T06:35:32Z")

</div>

Hi,  
As documentation explain, I use an AD Database Hybrid and it work well.  
But if we add/edit some roles changes, all system.user API (like getUsers, getUser...) and aren't update until the Cache Validation Timeout of the userSource.

[AD Database Hybrid - Ignition User Manual 8.1 - Ignition Documentation](https://docs.inductiveautomation.com/display/DOC81/AD+Database+Hybrid).

How to fix it, for responsive management users with perspective session?

Thanks

---

<div class="post-metadata">

**Author:** ![r.lebohec](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/r.lebohec/32/3704_2.png) [@r.lebohec](https://forum.inductiveautomation.com/u/r.lebohec)\
**Post date:** [October 30, 2023, 3:12pm UTC](https://forum.inductiveautomation.com/t/ad-database-hybrid-update-user-roles-modify/81078/2 "2023-10-30T15:12:43Z")

</div>

@jspecht

Moreover, I don't understand the sAMAccountName / userPrincipalName that returned by the Active Directory. It seems that if I try to connect user with his userPrincipalName the sAMAccountName returned by AD is the same of userPrincipalName and if I try with his sAMAccountName the userPrincipalName returned by AD seems to be the same of sAMAccountName ?

How can I fix this if operator use 'userPrincipalName' (ex:toto) / 'sAMAccountName' (ex:toto@entreprise.local) notation for roles association with hybrid database ?