# How to enable Role mapping for Azure AD Groups/ Users (Grafana OSS)

**URL:** <https://community.grafana.com/t/how-to-enable-role-mapping-for-azure-ad-groups-users-grafana-oss/148511>\
**Category:** Authentication\
**Tags:** azure-ad, grafana-roles, azure\
**Created:** [April 17, 2025, 11:09am UTC](https://community.grafana.com/t/how-to-enable-role-mapping-for-azure-ad-groups-users-grafana-oss/148511 "2025-04-17T11:09:44Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ukkonto001](https://avatars.discourse-cdn.com/v4/letter/u/b77776/32.png) [@ukkonto001](https://community.grafana.com/u/ukkonto001)\
**Post date:** [April 17, 2025, 11:09am UTC](https://community.grafana.com/t/how-to-enable-role-mapping-for-azure-ad-groups-users-grafana-oss/148511/1 "2025-04-17T11:09:44Z")

</div>

- What Grafana version and what operating system are you using?

Grafana v11.5.1 (c6c701cf5b) OSS

- **What** are you trying to achieve?

Automatically assign Roles when sign in with AzureAD User

- **How** are you trying to achieve it?

 ![image](https://us1.discourse-cdn.com/grafana/original/3X/1/6/16d351b8b4843a104dda70f47429a6db39d53cfd.png)  
I entered the “:1:Editor”

- What happened?

When signing in I only get the viewer Role although my user member of the azure AD group.

- What did you **expect** to happen?

To get the “Editor” Role after signing in.

- Can you copy/paste the configuration(s) that you are having problems with?

 ![image](https://us1.discourse-cdn.com/grafana/original/3X/1/6/16d351b8b4843a104dda70f47429a6db39d53cfd.png)

- Did you receive any errors in the Grafana UI or in related logs?

There no error in UI or Log.

- Did you follow any online instructions? If so, what is the URL?

[Configure Azure AD/Entra ID OAuth authentication | Grafana documentation](https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/azuread/)  
but the UI Setting in my screenshot is not part of the instruction.

I got the follow reply from Grafana support:  
_Integrating Azure AD (Microsoft Entra ID) with Grafana has different levels of availability depending on the Grafana license:_

- _Azure AD OAuth2 authentication is available and works on both Grafana Open Source and Grafana Enterprise._
- _Native Azure AD SAML integration and Team Sync with Azure AD groups are features exclusive to Grafana Enterprise._

_Therefore, the specific Azure AD setting you’re asking about will only work on an enterprise-licensed Grafana if it relies on native SAML or team synchronization with Azure AD groups. Basic authentication via OAuth2 is supported in both versions._

Is there still a way to implement this automated role mapping?