# Unable to grant a user with admin priviledges

**URL:** <https://community.jenkins.io/t/unable-to-grant-a-user-with-admin-priviledges/14363>\
**Category:** Using Jenkins\
**Created:** [April 18, 2024, 2:33pm UTC](https://community.jenkins.io/t/unable-to-grant-a-user-with-admin-priviledges/14363 "2024-04-18T14:33:06Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![vaithe](https://avatars.discourse-cdn.com/v4/letter/v/9f8e36/32.png) [@vaithe](https://community.jenkins.io/u/vaithe)\
**Post date:** [April 18, 2024, 2:33pm UTC](https://community.jenkins.io/t/unable-to-grant-a-user-with-admin-priviledges/14363/1 "2024-04-18T14:33:06Z")

</div>

I have users given prviledges based on user groups and all user all logging in through LDAP auth.  
I need to give specific user to have admin privileges. For this under Configure global security i checked the column against “Administrator” so that he can be having admin prviledges to see “manage Jenkins”.  
Post user refreshed cached and tried to login the user still unable to see the admin privileges.  
In some forum they say i need to do safe restart to reflect. Please confirm if the reflections will happen only post restart of jenkins

---

<div class="post-metadata">

**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\
**Post date:** [April 18, 2024, 3:27pm UTC](https://community.jenkins.io/t/unable-to-grant-a-user-with-admin-priviledges/14363/2 "2024-04-18T15:27:07Z")

</div>

Changes should work immediately. Don’t forget to save/apply the changes after granting the permission

---

<div class="post-metadata">

**Author:** ![vaithe](https://avatars.discourse-cdn.com/v4/letter/v/9f8e36/32.png) [@vaithe](https://community.jenkins.io/u/vaithe)\
**Post date:** [April 18, 2024, 3:46pm UTC](https://community.jenkins.io/t/unable-to-grant-a-user-with-admin-priviledges/14363/3 "2024-04-18T15:46:30Z")

</div>

Any clue on how to debug more. As post clicked save/apply its not reflecting.

---

<div class="post-metadata">

**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\
**Post date:** [April 18, 2024, 4:12pm UTC](https://community.jenkins.io/t/unable-to-grant-a-user-with-admin-priviledges/14363/4 "2024-04-18T16:12:43Z")

</div>

maybe the userid is wrong to which you grant the permission.

---

<div class="post-metadata">

**Author:** ![vaithe](https://avatars.discourse-cdn.com/v4/letter/v/9f8e36/32.png) [@vaithe](https://community.jenkins.io/u/vaithe)\
**Post date:** [April 18, 2024, 4:43pm UTC](https://community.jenkins.io/t/unable-to-grant-a-user-with-admin-priviledges/14363/5 "2024-04-18T16:43:25Z")

</div>

No no.The user assigned is the right user. My question is if in LDAP mode we define such that thats not a admin user but in manage credentials i configure that user as admin which will have higher precedence here

---

<div class="post-metadata">

**Author:** ![mawinter69](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/mawinter69/32/1625_2.png) [@mawinter69](https://community.jenkins.io/u/mawinter69)\
**Post date:** [April 18, 2024, 5:08pm UTC](https://community.jenkins.io/t/unable-to-grant-a-user-with-admin-priviledges/14363/6 "2024-04-18T17:08:26Z")

</div>

with ldap you only authenticate (check if the user exists and to which groups the user belongs).  
In the authorization (I assume you’re using matrix auth plugin) you grant permissions to users or groups  
 ![image](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/b/b37cddab968f826a1941eeec58c7aa440e9b232d.png)  
This grants admin permission to a user