# Access Denied xxxx is missing the Overall/Read permission using xxx\_xxx\_admin\_dev AD group **URL:** \ **Category:** Ask a question\ **Created:** [June 1, 2023, 6:18pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769 "2023-06-01T18:18:16Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![smuthakana](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@smuthakana](https://community.jenkins.io/u/smuthakana)\ **Post date:** [June 1, 2023, 6:18pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/1 "2023-06-01T18:18:16Z")
Getting Access Denied xxxx is missing the Overall/Read permission using xxx\_xxx\_admin\_dev AD group ---
**Author:** ![slide\_o\_mix](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/slide_o_mix/32/20977_2.png) [@slide\_o\_mix](https://community.jenkins.io/u/slide_o_mix)\ **Post date:** [June 1, 2023, 9:30pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/2 "2023-06-01T21:30:11Z")
Did you add permissions for that group in the Jenkins UI? ---
**Author:** ![smuthakana](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@smuthakana](https://community.jenkins.io/u/smuthakana)\ **Post date:** [June 6, 2023, 10:45am UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/4 "2023-06-06T10:45:37Z")
yes i have added for group user overall permissions in jenkinsUI ---
**Author:** ![nphuon](https://avatars.discourse-cdn.com/v4/letter/n/eada6e/32.png) [@nphuon](https://community.jenkins.io/u/nphuon)\ **Post date:** [March 28, 2025, 4:27pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/5 "2025-03-28T16:27:16Z")
hi team; i can login with my user id which is assigned admin role in jenkins \> manage jenkins \> manage and assign role in global role without any issue however, i would like to craate a group and my user id on this group, this group is assigned under admin role but i’m getting [Access Denied xxxx is missing the Overall/Read permission]. Could you please advice? ---
**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\ **Post date:** [March 28, 2025, 4:42pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/6 "2025-03-28T16:42:33Z")
Is your user member of that group? You can go to `/whoAmI` to see to which groups your user belongs to. Groups are not managed in Jenkins, the membership of a user to a group is determined by the security realm (e.g Active Directory, ldap, saml, …). ---
**Author:** ![nphuon](https://avatars.discourse-cdn.com/v4/letter/n/eada6e/32.png) [@nphuon](https://community.jenkins.io/u/nphuon)\ **Post date:** [March 28, 2025, 10:12pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/7 "2025-03-28T22:12:36Z")
Hi Mawinter; Yes, my userid is on that group. My user id and the group are the same admin role under Dashboard \> Manage Jenkins \> Manage and assign Roles \> Assign roles \> global roles When I tried to access /whoAmI which use group with my ID, I see my ID show correctly. My name is correct too when accessing jenkins but it get access denied `` ![](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/6/6583deada2f53607982c0d9f47cc1718df789a10.png) Regards, Ngan ---
**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\ **Post date:** [March 28, 2025, 10:55pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/8 "2025-03-28T22:55:43Z")
The picture shows that you’re only member of the group “authenticated”, a Jenkins internal group that each user gets that is logged in. ---
**Author:** ![nphuon](https://avatars.discourse-cdn.com/v4/letter/n/eada6e/32.png) [@nphuon](https://community.jenkins.io/u/nphuon)\ **Post date:** [April 14, 2025, 8:55pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/9 "2025-04-14T20:55:04Z")
this user is on group which has the admin permission but this userid is getting access denied.what should i do? ---
**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\ **Post date:** [April 14, 2025, 9:03pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/10 "2025-04-14T21:03:24Z")
Group membership is defined by the security realm. The `whoAmI` page shows what the securityRealm returned as group members. Which securityRealm are you using? ---
**Author:** ![nphuon](https://avatars.discourse-cdn.com/v4/letter/n/eada6e/32.png) [@nphuon](https://community.jenkins.io/u/nphuon)\ **Post date:** [April 14, 2025, 9:54pm UTC](https://community.jenkins.io/t/access-denied-xxxx-is-missing-the-overall-read-permission-using-xxx-xxx-admin-dev-ad-group/7769/11 "2025-04-14T21:54:01Z")
SAML 2.0 (we use the metadata from ping) and detail: - IdP Metadata URL: URL to take the IdP Metadata from: blank - Display Name Attribute: [http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name](http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name) - Group Attribute: [http://schemas.xmlsoap.org/claims/Group](http://schemas.xmlsoap.org/claims/Group) - Maximum Authentication Lifetime:86400 - Username Attribute: username - Email Attribute: email - Authorization: Role-Based Strategy