> For the complete documentation index, see [llms.txt](https://docs.collibra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.collibra.com/data-quality-self-hosted/admin-configuration/admin-console/user-management/ad-security/ad-group-to-role-mapping/ad-group-to-role-mapping-overview.md).

# AD Group to Role Mapping Overview

When you map an Active Directory (AD) security group to a Data Quality & Observability (self-hosted) role, you grant role-based access to all users from the selected AD Group to the selected Data Quality & Observability (self-hosted) role. You can find additional information on creating custom application roles on [Adding custom roles](/data-quality-self-hosted/admin-configuration/admin-console/role-management/role-management/adding-custom-roles.md).

Application properties set in the **owl-env.sh** file or **Web ConfigMap** can be configured to determine which LDAP properties correspond to LDAP query results. Go to [Configuring LDAP settings](/data-quality-self-hosted/admin-configuration/admin-console/user-management/ad-security/configuring-ldap-settings.md) for more information about the LDAP properties.

When group mapping, the full path (unique) and display name are required.

{% tabs %}
{% tab title="Example" icon="glasses-round" %}
`LDAP_GROUP_RESULT_DN_ATTRIBUTE=distinguishednameLDAP_GROUP_RESULT_NAME_ATTRIBUTE=CN`
{% endtab %}
{% endtabs %}

![](https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-35fee5f491b07c21940465c6c9528d6a3044cdf1%2Fdq-role-mapping-add-roles_react.png?alt=media)

## What's next

* [Map AD groups to Data Quality & Observability (self-hosted) roles](/data-quality-self-hosted/admin-configuration/admin-console/user-management/ad-security/ad-group-to-role-mapping/mapping-ad-security-groups-to-roles.md)
* [Map security groups to Data Quality & Observability (self-hosted) roles when using SSO with SAML](/data-quality-self-hosted/admin-configuration/admin-console/user-management/ad-security/ad-group-to-role-mapping/mapping-security-groups-to-roles-when-using-sso-with-saml.md)