> For the complete documentation index, see [llms.txt](https://docs.collibra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.collibra.com/data-quality-self-hosted/admin-configuration/admin-console/user-management/ad-security/ad-group-to-role-mapping/mapping-ad-security-groups-to-roles.md).
# Mapping AD security groups to roles
This section shows you how to map Active Directory (AD) security groups to Data Quality & Observability (self-hosted) user roles.
When Active Directory or LDAP is configured, the available groups are based on the settings under the Connections tab of the AD Security page.
## Steps
{% stepper %}
{% step %}
Sign in to Data Quality & Observability (self-hosted) and click 
in the left navigation pane.
{% endstep %}
{% step %}
Click **Admin Console**.
{% endstep %}
{% step %}
Click **User Management** and then click **AD Security**.\ :chevrons-right: The AD and LDAP Security Settings page opens.
{% endstep %}
{% step %}
Click the **Connections** tab and ensure that Active Directory is selected as the Connection Type.
{% endstep %}
{% step %}
Click the **Mappings** tab to display the table of roles and AD groups mapped to them.
{% endstep %}
{% step %}
To map a group to an existing role, find the row containing the role to which you want to map one or multiple AD groups, then click the 
in the **Action** column.\ :chevrons-right: The edit role mapping dialog appears, where you can map AD groups to the selected role.
{% endstep %}
{% step %}
Map AD groups to the role by moving them from the **Not included** box to the **Included** box. To do this, select the AD group(s) you wish to map to the role, then click the right arrow. You can also filter the AD group in the search fields.
{% hint style="info" %}
To remove a AD group to role mapping, click the left arrow to move the role(s) you select from the **Included** column back to the **Not included** column.
{% endhint %}
{% endstep %}
{% step %}
Click **Submit**.
{% endstep %}
{% endstepper %}
After successfully mapping an AD group to a role, sign out of Collibra DQ and sign back in as a Domain user.
{% hint style="info" %}
You must restart the Collibra DQ web application by running `./owlmanage.sh restart_owlweb` for Standalone or restart the Web Pod for Cloud Native.
{% endhint %}
When signing into Data Quality & Observability (self-hosted), append the domain to the end of the username.
