# SyncRolesFromGroups

Whether to synchronize roles from groups. This parameter ensures that user permissions are always synchronized with security groups.

When IDOL Server queries a group server:

- it adds the groups that return for the specified user as roles, if those roles do not already exist.

- it adds the user as a member of those roles.

To enable synchronization globally, set `SyncRolesFromGroups` to `True` in the `[UserSecurity]` section.

To enable synchronization for a specific repository, set `SyncRolesFromGroups` to `True` in the `[MySecurityRepository]` section for the individual security type.

Type: | Boolean
Default: | False
Required: | No
Configuration Section: | UserSecurity or `MySecurityRepository`
Example: | `SyncRolesFromGroups=True`
See Also: | GroupServerParentRole

_FT_HTML5_bannerTitle.htm