<p>Based on your title, no.</p>

<ol>
<li>It's impossible to quantify if every application has this capability. Many do.</li>
<li>Users/Groups in Jenkins OSS map back to LDAP but you control the permissions via Jenkins.</li>
</ol>

<p><a href="https://i.sstatic.net/gvdRw.jpg" rel="nofollow noreferrer"><img src="https://i.sstatic.net/gvdRw.jpg" alt="enter image description here"></a></p>

<p>As you can see above Users/Groups have specific permissions that are specified/controlled in Jenkins. If this group exists in LDAP (xxx) the users in this group get the permission you setup in Jenkins. This makes it easier then managing individuals.  </p>

CC BY-SA 4.0
2020-03-31T05:41:25.187Z
Thank you for your good answer!
rawmain
CC BY-SA 4.0
2020-03-31T03:17:22.300Z
2020-03-31T03:17:22.300Z
casey vega
<p>LDAP in FreeIPA, it can create groups, roles and set permissions. Applications such as Jenkins, Github also has roles feature.</p>

<p>2 questions:</p>

<ol>
<li>Can roles feature be used in every application? (At least Jenkins and Github may use groups feature in LDAP)</li>
<li>If want to control several users can access Jenkins, several users can access Github, is it possible to control it in LDAP side? If deploy multiple LDAP server for different applications will realize it, but that's complex.</li>
</ol>

<jenkins><github><role-based-access-control>
Is it possible to set role in FreeIPA to use for applications as Jenkins, Github?
rawmain
# Is it possible to set role in FreeIPA to use for applications as Jenkins, Github?

(Asked by: username_0 on 2020-03-25)

LDAP in FreeIPA, it can create groups, roles and set permissions. Applications such as Jenkins, Github also has roles feature.

2 questions:

1. Can roles feature be used in every application? (At least Jenkins and Github may use groups feature in LDAP)
2. If want to control several users can access Jenkins, several users can access Github, is it possible to control it in LDAP side? If deploy multiple LDAP server for different applications will realize it, but that's complex.

**Tags:** jenkins, github, role-based-access-control


---

## 1 answers

### Answer by username_1 on 2020-03-31. Score: 1 | Accepted answer

Based on your title, no.

1. It's impossible to quantify if every application has this capability. Many do.
2. Users/Groups in Jenkins OSS map back to LDAP but you control the permissions via Jenkins.

[![enter image description here](https://i.sstatic.net/gvdRw.jpg)](https://i.sstatic.net/gvdRw.jpg)

As you can see above Users/Groups have specific permissions that are specified/controlled in Jenkins. If this group exists in LDAP (xxx) the users in this group get the permission you setup in Jenkins. This makes it easier then managing individuals.

> **Comments:**
> **username_0**: Thank you for your good answer!  

---

