# User does not 'stick' as Editor, reverts to Viewer

**URL:** <https://community.grafana.com/t/user-does-not-stick-as-editor-reverts-to-viewer/20573>\
**Category:** Configuration\
**Created:** [August 29, 2019, 1:53pm UTC](https://community.grafana.com/t/user-does-not-stick-as-editor-reverts-to-viewer/20573 "2019-08-29T13:53:29Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mphare](https://sea2.discourse-cdn.com/grafana/user_avatar/community.grafana.com/mphare/32/7896_2.png) [@mphare](https://community.grafana.com/u/mphare)\
**Post date:** [August 29, 2019, 1:53pm UTC](https://community.grafana.com/t/user-does-not-stick-as-editor-reverts-to-viewer/20573/1 "2019-08-29T13:53:30Z")

</div>

I have Grafana 6.3.3 connected to our LDAP  
When I log in using my personal LDAP creds I get assigned as a Viewer  
So I logged in as the admin account, changed me to an Editor  
Logged out and logged back in as me - and I don’t have any Editor access  
So, I logged back out and logged back in as admin and my permissions were reset to Viewer  
So I changed them to Editor again, thinking maybe they didn’t get saved. I logged out of admin, then logged back in as admin and the permissions were still Editor  
So, I logged out, logged in as me - and no Editor access. Logged out and back in as admin and they are reset to Viewer again.

What am I doing wrong???

---

<div class="post-metadata">

**Author:** ![calebcall](https://avatars.discourse-cdn.com/v4/letter/c/fbc32d/32.png) [@calebcall](https://community.grafana.com/u/calebcall)\
**Post date:** [August 29, 2019, 9:17pm UTC](https://community.grafana.com/t/user-does-not-stick-as-editor-reverts-to-viewer/20573/2 "2019-08-29T21:17:21Z")

</div>

Permissions with LDAP are sync’d each time you login. You no longer manager the user via the UI (except for apply the overall “Grafana Admin” role). You need to set your acl correctly in your ldap.toml file. See [https://grafana.com/docs/auth/ldap/#group-mappings](https://grafana.com/docs/auth/ldap/#group-mappings) for examples. (in short, assign a dn a role and an org)
