# Users, roles, security levels and identity providers

**URL:** <https://forum.inductiveautomation.com/t/users-roles-security-levels-and-identity-providers/97716>\
**Category:** Ignition\
**Tags:** security, ignition81\
**Created:** [October 24, 2024, 10:59am UTC](https://forum.inductiveautomation.com/t/users-roles-security-levels-and-identity-providers/97716 "2024-10-24T10:59:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Henk](https://avatars.discourse-cdn.com/v4/letter/h/b5ac83/32.png) [@Henk](https://forum.inductiveautomation.com/u/Henk)\
**Post date:** [October 24, 2024, 10:59am UTC](https://forum.inductiveautomation.com/t/users-roles-security-levels-and-identity-providers/97716/1 "2024-10-24T10:59:00Z")

</div>

In the identity provider, an expression can be used that gives a role permission to access a security level, like this:

containsAny( {idp-attributes:roles}, 'role\_operators' )

Is it also possible to give a user access to a security level without using roles?  
You can of course give a 'personal' role to a user and then use the same expression with the correct role name, but I would like to know if you can also do something directly with the username.