# AD/Database Hybrid User Management

**URL:** <https://forum.inductiveautomation.com/t/ad-database-hybrid-user-management/80361>\
**Category:** Ignition\
**Tags:** scripting, vision\
**Created:** [October 11, 2023, 8:23pm UTC](https://forum.inductiveautomation.com/t/ad-database-hybrid-user-management/80361 "2023-10-11T20:23:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Harsh\_Patel](https://avatars.discourse-cdn.com/v4/letter/h/a9a28c/32.png) [@Harsh\_Patel](https://forum.inductiveautomation.com/u/Harsh_Patel)\
**Post date:** [October 11, 2023, 8:23pm UTC](https://forum.inductiveautomation.com/t/ad-database-hybrid-user-management/80361/1 "2023-10-11T20:23:51Z")

</div>

Hi,  
I have a user source AD/Database Hybrid configured where AD is talking care User Authentication and the Database is responsible for assigning roles.

I am looking for a way to assign roles to AD users using the user management Client Window.

For the default and database user source, there is an option to edit the user and assign a role in the user management Client Window however, the edit option is greyed out for the AD/Database Hybrid user source. Is there a different way to edit the user and assign a role for AD users using the user management Client Window?

Thank You

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [October 11, 2023, 8:26pm UTC](https://forum.inductiveautomation.com/t/ad-database-hybrid-user-management/80361/2 "2023-10-11T20:26:01Z")

</div>

Please tag your question title as Vision (which it seems to be) or Perspective.  
What's the problem you are having?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [October 11, 2023, 8:39pm UTC](https://forum.inductiveautomation.com/t/ad-database-hybrid-user-management/80361/3 "2023-10-11T20:39:15Z")

</div>

No, the point of any database user source is to allow a site to manage user information via normal database methods. And when combined with Active Directory, to just manage roles in the database. (AD manages the users themselves.)

You will have to roll your own role-management UI with database operations.