Map Entra or LDAP groups to roles for RBAC

Describe the problem/error/question

If I have an enterprise license that supports RBAC, can I assign n8n roles to groups, so that if a user in my company-wide SSO system is a member of a group such as ‘n8n-admins-for-project-x’ then n8n would allow any users in that group to be admins for my ‘x’ project?

If so, is there documentation that shows the necessary steps?

What is the error message (if any)?

Please share your workflow

(Select the nodes on your canvas and use the keyboard shortcuts CMD+C/CTRL+C and CMD+V/CTRL+V to copy and paste the workflow.)

Share the output returned by the last node

Information on your n8n setup

  • n8n version:
  • Database (default: SQLite):
  • n8n EXECUTIONS_PROCESS setting (default: own, main):
  • Running n8n via (Docker, npm, n8n cloud, desktop app):
  • Operating system:

Manual post-login assignment. Enable LDAP/Login → Users log in with corporate credentials. After the first login, the administrator enters the Project Members panel and assigns the corresponding role (Editor/Viewer).

It’s important to note that this is ideal for small teams, but it will require intervention and is not retained in future syncs.

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.