# Idp Permission don't show Roles

**URL:** <https://forum.inductiveautomation.com/t/idp-permission-dont-show-roles/46133>\
**Category:** Ignition\
**Tags:** perspective, ignition81\
**Created:** [April 28, 2021, 5:28pm UTC](https://forum.inductiveautomation.com/t/idp-permission-dont-show-roles/46133 "2021-04-28T17:28:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![AGDC04](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/agdc04/32/6366_2.png) [@AGDC04](https://forum.inductiveautomation.com/u/AGDC04)\
**Post date:** [April 28, 2021, 5:28pm UTC](https://forum.inductiveautomation.com/t/idp-permission-dont-show-roles/46133/1 "2021-04-28T17:28:13Z")

</div>

Hello,

I’m using OKTA OpenID to get roles from users, I’m able to see at IDP test, also at designer, but if I try to set a permission at View, show me only at Authorized level, not inside. Required another setup?

Ignition 8.1.3 version running and OpenID with OKTA

---

<div class="post-metadata">

**Author:** ![jdahlinger](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jdahlinger/32/15735_2.png) [@jdahlinger](https://forum.inductiveautomation.com/u/jdahlinger)\
**Post date:** [April 29, 2021, 12:12am UTC](https://forum.inductiveautomation.com/t/idp-permission-dont-show-roles/46133/2 "2021-04-29T00:12:21Z")

</div>

It sounds like you still need to add your possible roles as Security Levels under Configure \> Security Levels \> Public \> Authenticated \> Roles. Once they exist there, they should be present to select when configuring view permissions.

---

<div class="post-metadata">

**Author:** ![AGDC04](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/agdc04/32/6366_2.png) [@AGDC04](https://forum.inductiveautomation.com/u/AGDC04)\
**Post date:** [April 29, 2021, 11:34am UTC](https://forum.inductiveautomation.com/t/idp-permission-dont-show-roles/46133/3 "2021-04-29T11:34:47Z")

</div>

Right, I get it now, they take the setting from Gateway, thanks for the info.
