LDAP in FreeIPA, it can create groups, roles and set permissions. Applications such as Jenkins, Github also has roles feature.

2 questions:

  1. Can roles feature be used in every application? (At least Jenkins and Github may use groups feature in LDAP)
  2. If want to control several users can access Jenkins, several users can access Github, is it possible to control it in LDAP side? If deploy multiple LDAP server for different applications will realize it, but that's complex.

1 Answer 1


Based on your title, no.

  1. It's impossible to quantify if every application has this capability. Many do.
  2. Users/Groups in Jenkins OSS map back to LDAP but you control the permissions via Jenkins.

enter image description here

As you can see above Users/Groups have specific permissions that are specified/controlled in Jenkins. If this group exists in LDAP (xxx) the users in this group get the permission you setup in Jenkins. This makes it easier then managing individuals.

  • Thank you for your good answer!
    – rawmain
    Mar 31, 2020 at 5:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.