# Jenkins Helm chart values for role based authorization strategy

**URL:** https://community.jenkins.io/t/jenkins-helm-chart-values-for-role-based-authorization-strategy/5678
**Category:** Ask a question
**Created:** [February 8, 2023, 11:37pm UTC](https://community.jenkins.io/t/jenkins-helm-chart-values-for-role-based-authorization-strategy/5678 "2023-02-08T23:37:13Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![hanuman.bandhu](https://avatars.discourse-cdn.com/v4/letter/h/b5ac83/32.png) [@hanuman.bandhu](https://community.jenkins.io/u/hanuman.bandhu)
#### Post date: [February 8, 2023, 11:37pm UTC](https://community.jenkins.io/t/jenkins-helm-chart-values-for-role-based-authorization-strategy/5678/1 "2023-02-08T23:37:13Z")

</div>

I have deployed Jenkins with Helm chart in EKS and integrated with our AD/LDAPS .

Now i am planning to add the role based capability to my jenkins instance, but with AD integration , the role base strategy is not working

If i use below code in helm chart , I am able to login and can do anything .

authorizationStrategy: |-  
loggedInUsersCanDoAnything:  
allowAnonymousRead: false

But if i enable the role based strategy , i am able to login but, don’t have admin privileges eventhough i belongs to jenkins-admin AD group in my active directory .

authorizationStrategy: |-  
roleBased:  
roles:  
global:  
- name: “admin”  
description: “Jenkins administrators”  
permissions:  
- “Overall/Administer”  
assignments:  
- “admin”  
- “Jenkins Admins”  
- name: “jenkins-admin”  
description: “Users in the Admin AD group”  
permissions:  
“Overall/Administer”  
assignments:  
- “admin”  
- “Jenkins Admins”

Can someone help me is there anything i am missing

---

<div class="post-metadata">

### Author: ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)
#### Post date: [February 9, 2023, 8:34am UTC](https://community.jenkins.io/t/jenkins-helm-chart-values-for-role-based-authorization-strategy/5678/2 "2023-02-09T08:34:34Z")

</div>

First role strategy is case sensitive, so you need to make sure that you use the exact same names for your groups in the configuration.  
Best way to do this is to start your Jenkins without auth as you’re able to do and then configure the Active Directory plugin. Then go to /whoAmI which should show you to which Authorities (aka groups) your user belongs. You will need to use exactly what is shown their in your configuration.

---

<div class="post-metadata">

### Author: ![hanuman.bandhu](https://avatars.discourse-cdn.com/v4/letter/h/b5ac83/32.png) [@hanuman.bandhu](https://community.jenkins.io/u/hanuman.bandhu)
#### Post date: [February 13, 2023, 10:57pm UTC](https://community.jenkins.io/t/jenkins-helm-chart-values-for-role-based-authorization-strategy/5678/3 "2023-02-13T22:57:15Z")

</div>

Thanks , earlier i did a mistake by creating global roles with my AD roles . Corrected it by adding the AD roles to assignments for the global roles i created .

- name: “DevOps”. – Global Role Name  
description: “DevOps Users” – Description  
permissions:  
- “Overall/Administer” --Permission  
assignments:  
- Jenkins – DevOps – My AD Role

---

<div class="post-metadata">

### Author: ![xiezhao](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/xiezhao/32/7895_2.png) [@xiezhao](https://community.jenkins.io/u/xiezhao)
#### Post date: [April 19, 2024, 9:15am UTC](https://community.jenkins.io/t/jenkins-helm-chart-values-for-role-based-authorization-strategy/5678/4 "2024-04-19T09:15:41Z")

</div>

Hi, I wanna know where i can get this format in a document like this  
roleBased:  
roles:  
global:

- name: “admin”  
description: “Jenkins administrators”  
permissions:
- “Overall/Administer”
