Assigning LDAP users to groups or roles

When you add individual LDAP users to Keycloak, you must assign the users to roles to define their access to VSP One File management software applications and features. You can add users directly to a role or you can add them to a group that is assigned to a role and all members in the group inherit that role.

1. Assign the user or users to a role by using one of the following methods:
   • Assign users directly to a role.
     1. Navigate to Manage > Users.
     2. Click the user name to open the user details.
     3. Click the Role mapping tab.
     4. From the Assign role drop-down, select Client roles or Realm roles. The available roles are shown based on your selection.
     5. Select the role or roles, and then click Assign.
   • Assign users to a group.
     1. Navigate to Manage > Groups.
     2. Select the group that you want to add the users to, and click the Members tab.
     3. Click Add member, select the user or users that you want to add to the group, and then click Add.
2. Navigate to Manage > Users to confirm that the user or users are assigned to a group or role.