> For the complete documentation index, see [llms.txt](https://docs.collibra.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.collibra.com/data-quality-self-hosted/admin-configuration/admin-console/user-management/saml-security/mapping-security-groups-to-roles-when-using-sso-with-saml.md).

# Mapping security groups to roles when using SSO with SAML

This section shows you how to map security groups to Data Quality & Observability (self-hosted) user roles when using SSO with SAML.

{% hint style="info" %}
To enable SAML, go to [Configuring SAML authentication](/data-quality-self-hosted/security-configuration/saml-authentication/configuring-saml-authentication.md).
{% endhint %}

### Steps

{% stepper %}
{% step %}
Sign in to Data Quality & Observability (self-hosted) and click <img src="https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-268a786d787f353b92e094a60945df32bf9cb208%2FCogwheelIcon.svg?alt=media" alt="Cogwheel icon" data-size="line"> in the left navigation pane.
{% endstep %}

{% step %}
Select **Admin Console**.
{% endstep %}

{% step %}
From User Management in the left navigation panel, select **AD Security**.
{% endstep %}

{% step %}
Select the **Mappings** tab.
{% endstep %}

{% step %}
To map a group to an existing role, click the ![](https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-0bfb53ca31f865c3379dd23768148bde36efdc56%2Fdq-edit-icon.png?alt=media) icon for that role, in the **Action** column.The edit role mapping window displays for that specific role. In this window, you can map groups to Collibra DQ roles by moving the groups from the **Not included** box to the **Included** box. To do this, click the left and right arrows. You can also filter the groups and roles in the search fields.
{% endstep %}

{% step %}
Enter the name of a group in the input field below the **Not included** box and click the ![](https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-5e6e7644812d1cba4fce725f09c273b37f3cf444%2Fdq-add-icon.png?alt=media) icon.

![](https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-c28bfdcf5e91fef010c6bfc4a8e12c535aabcb15%2Fdq-edit-role-mapping-create-group.png?alt=media)

![](https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-f76e9cbc73642fd2ae3611c4b0d5a501a7949f60%2Fdq-edit-role-mapping-create-group-to-not-included.png?alt=media)
{% endstep %}

{% step %}
You can now click the right arrow to map this group to the role.

![](https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-15f78b88556f662bb782d1115545df13d42b6cfe%2Fdq-edit-role-mapping-to-included.png?alt=media)
{% endstep %}

{% step %}
When you have finished adding your group(s), click **Submit**.

Your new group(s) now appears in the Groups column for the selected role and users who are members of the group(s) should now have the permissions for the role.

![](https://4121921244-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FWCrP7Albs8DfJjIQxUxw%2Fuploads%2Fgit-blob-7e86c4dc73a93a0ccc05607623da61d635227309%2Fdq-role-mapping-added-group-without-ad.png?alt=media)
{% endstep %}
{% endstepper %}