# Cannot access gateway config with Active Directory / Domain user **URL:** \ **Category:** Ignition\ **Created:** [October 5, 2022, 1:41pm UTC](https://forum.inductiveautomation.com/t/cannot-access-gateway-config-with-active-directory-domain-user/64846 "2022-10-05T13:41:43Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![patrick.maltais](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/patrick.maltais/32/3958_2.png) [@patrick.maltais](https://forum.inductiveautomation.com/u/patrick.maltais)\ **Post date:** [October 5, 2022, 1:41pm UTC](https://forum.inductiveautomation.com/t/cannot-access-gateway-config-with-active-directory-domain-user/64846/1 "2022-10-05T13:41:43Z")
My gateway is configured to use an Active Directory user source (NOT the AD/internal Hybrid). My domain account is part of the admin group and I can verify the User Source using it. Login Succeed and shows the group my user is assigned to. I can use my account to start de designer and make changes to projects. But when I try to login in the gateway config page, my account is not working. I have to use the built-in Ignition admin account. I think I missed an option somewhere on the gateway. Can anyone help? ---
**Author:** ![djs](https://avatars.discourse-cdn.com/v4/letter/d/e47774/32.png) [@djs](https://forum.inductiveautomation.com/u/djs)\ **Post date:** [October 5, 2022, 2:08pm UTC](https://forum.inductiveautomation.com/t/cannot-access-gateway-config-with-active-directory-domain-user/64846/2 "2022-10-05T14:08:56Z")
On the Gateway Webpage, under _Config/Security/General/Gateway Config Permissions_ you can set the roles that can access the config page. ---
**Author:** ![djs](https://avatars.discourse-cdn.com/v4/letter/d/e47774/32.png) [@djs](https://forum.inductiveautomation.com/u/djs)\ **Post date:** [October 5, 2022, 2:14pm UTC](https://forum.inductiveautomation.com/t/cannot-access-gateway-config-with-active-directory-domain-user/64846/3 "2022-10-05T14:14:56Z")
The roles under _Config/Security/Security Levels_ will have to match the roles you have in AD, not sure if it will work without setting that up as well. ---
**Author:** ![patrick.maltais](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/patrick.maltais/32/3958_2.png) [@patrick.maltais](https://forum.inductiveautomation.com/u/patrick.maltais)\ **Post date:** [October 5, 2022, 2:18pm UTC](https://forum.inductiveautomation.com/t/cannot-access-gateway-config-with-active-directory-domain-user/64846/4 "2022-10-05T14:18:56Z")
Yes I specified the proper group earlier today. My account is part of that group. I don't know if it required a gateway restart though? By the way, the AD group's name contains spaces and specials characters (it's in french). Can this be a problem? ---
**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\ **Post date:** [October 5, 2022, 3:01pm UTC](https://forum.inductiveautomation.com/t/cannot-access-gateway-config-with-active-directory-domain-user/64846/5 "2022-10-05T15:01:37Z")
I think that if you have the Administrator account set up in Ignition's default user source and, in your AD source, have a role defined as **Administrator** (with exactly the same spelling - not a translation) it should work. Someone who has done this more recently may be able to clarify. ---
**Author:** ![patrick.maltais](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/patrick.maltais/32/3958_2.png) [@patrick.maltais](https://forum.inductiveautomation.com/u/patrick.maltais)\ **Post date:** [October 5, 2022, 6:02pm UTC](https://forum.inductiveautomation.com/t/cannot-access-gateway-config-with-active-directory-domain-user/64846/6 "2022-10-05T18:02:40Z")
Found my problem. Config/Security/General/System Identity Provider was still using the default selection. I created a new Identity Provider under Config/Security/Identity Provider and assigned my AD as its User Source, then assigned that new Identity Provider to Config/Security/General/System Identity Provider. ---
**Author:** ![Jason\_Bender](https://avatars.discourse-cdn.com/v4/letter/j/47e85d/32.png) [@Jason\_Bender](https://forum.inductiveautomation.com/u/Jason_Bender)\ **Post date:** [December 13, 2024, 2:57pm UTC](https://forum.inductiveautomation.com/t/cannot-access-gateway-config-with-active-directory-domain-user/64846/7 "2024-12-13T14:57:58Z")
This was my exact problem - thank you! However I was still confused for a while on the fact the an Identity Provider needs to be created of type 'Ignition' with 'User Source' set to your AD that was set up in 'users, roles'. ``` Config -> Security -> Identity Providers Create New Ignition Provider -> Ignition -> Next Provider Name: MyName User Source: <- Drop down, select your AD ``` After that the web config login worked. All other logins worked without this for some reason... Including here in case it helps anyone else.