# Default User Role?

**URL:** <https://forum.inductiveautomation.com/t/default-user-role/12677>\
**Category:** Ignition\
**Created:** [February 14, 2017, 4:09pm UTC](https://forum.inductiveautomation.com/t/default-user-role/12677 "2017-02-14T16:09:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Caleb\_Bohon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/caleb_bohon/32/3293_2.png) [@Caleb\_Bohon](https://forum.inductiveautomation.com/u/Caleb_Bohon)\
**Post date:** [February 14, 2017, 4:09pm UTC](https://forum.inductiveautomation.com/t/default-user-role/12677/1 "2017-02-14T16:09:54Z")

</div>

Hi,

I have a customer with AD / hybrid user control. They have a web facing home page so that users can login from home if necessary. But I’m concerned that this setup is not as secure as it could be. I would like to force users to login before they see the home page.

I see how to do this, but there is one problem… each user has to be assigned a role before they can login.

Is there a way to assign a default role or allow role-less login to the home page?

---

<div class="post-metadata">

**Author:** ![adam.morales](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/adam.morales/32/3405_2.png) [@adam.morales](https://forum.inductiveautomation.com/u/adam.morales)\
**Post date:** [February 14, 2017, 10:08pm UTC](https://forum.inductiveautomation.com/t/default-user-role/12677/2 "2017-02-14T22:08:24Z")

</div>

The validation will always be role-based, so you will need some kind of default role. One way to do this would be to use an AD/Database User Source, so that the roles are defined on the database, which you would have the freedom to configure yourself.

You could even add a union clause to the User’s Roles Query in this user source to always return a certain role name that would only need to be specified here. That way, you would not even need to add that role for every user.

---

<div class="post-metadata">

**Author:** ![Caleb\_Bohon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/caleb_bohon/32/3293_2.png) [@Caleb\_Bohon](https://forum.inductiveautomation.com/u/Caleb_Bohon)\
**Post date:** [February 15, 2017, 1:52am UTC](https://forum.inductiveautomation.com/t/default-user-role/12677/3 "2017-02-15T01:52:48Z")

</div>

Ok. That makes sense. I guess the AD/Internal Hybrid is not going to cut it.

Thanks Adam.