# Giving Administrator rights to AD / internal hybrid user source users **URL:** \ **Category:** Ignition\ **Tags:** security\ **Created:** [March 9, 2020, 8:35pm UTC](https://forum.inductiveautomation.com/t/giving-administrator-rights-to-ad-internal-hybrid-user-source-users/32940 "2020-03-09T20:35:48Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\ **Post date:** [March 9, 2020, 8:35pm UTC](https://forum.inductiveautomation.com/t/giving-administrator-rights-to-ad-internal-hybrid-user-source-users/32940/1 "2020-03-09T20:35:48Z")
I have created an _AD [Active Directory] / Internal Hybrid_ user source. It is working properly for client access control. I wish to authenticate admin users in the same manner. How do I do this? (We nearly locked ourselves out by selecting Config | System - Gateway Settings | System User Source | AD internal hybrid. Fortunately we still had a browser logged in as admin.) What’s the trick? Related post: [Possible to lock self out of gateway configuration](http://forum.inductiveautomation.com/t/possible-to-lock-self-out-of-gateway-configuration/23083). ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 9, 2020, 8:38pm UTC](https://forum.inductiveautomation.com/t/giving-administrator-rights-to-ad-internal-hybrid-user-source-users/32940/2 "2020-03-09T20:38:12Z")
_ **Soft** _ fallback to the internal user source. ---
**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\ **Post date:** [March 9, 2020, 8:42pm UTC](https://forum.inductiveautomation.com/t/giving-administrator-rights-to-ad-internal-hybrid-user-source-users/32940/3 "2020-03-09T20:42:49Z")
Cool, and thank you for the quick reply. That should get me back in using “admin”. Now how do I give myself admin rights when I log in as myself using the _AD / internal hybrid_ authentication? ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [March 9, 2020, 9:11pm UTC](https://forum.inductiveautomation.com/t/giving-administrator-rights-to-ad-internal-hybrid-user-source-users/32940/4 "2020-03-09T21:11:55Z")
Pretty sure, just give `admin` a role with the exact same name as your `administrator` role in the AD/Internal user source. ---
**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\ **Post date:** [March 9, 2020, 9:57pm UTC](https://forum.inductiveautomation.com/t/giving-administrator-rights-to-ad-internal-hybrid-user-source-users/32940/5 "2020-03-09T21:57:56Z")
Thank you Phil and Paul. For anyone else looking for a little more detail: For safety I recommend that you open a different browser (which doesn’t know what the other one is doing - a private window might do the trick) and log in as _admin_. This way if you lock yourself out on the other browser you’re still in as admin on this one. Set your user source. 1. Get your AD user source set up and verify it with the user source test. It’s a good idea to have a couple of username passwords that you can use so that yocan test various access levels. 2. Go to: _Config | System - Gateway Settings | System User Source | AD internal hybrid._ 3. On that page, _Gateway Config Role(s):_ **Administrator**. (This is the default.) 4. Then _Status Page Role(s):_ **Administrator**. (This is the default.) 5. Save. Now we need to add the Administrator role to our _AD / internal hybrid_ user source. 1. Go to \*Config | Security - Users, Roles | AD internal hybrid - Manage users. 2. On the _Roles_ tab add a role _Administrator_ exactly as set in step 3. 3. On the _User_ tab select the user to be assigned _Administrator_ rights. Edit and check the _Administrator_ role. You can now sign out as _admin_ and try signing in as the AD user that you have just set up.