# Syncing roles

## Active Directory role-sync prerequisites

* The **Active Directory** roles that are required to be synced must be created in CloudIO platform.
* The role code in the CloudIO platform must be the same as in the **Active Directory**.

### For syncing the roles of the organization with the **Active Directory**, assign values to the following CloudIO profiles:

* AD\_ADMIN\_USER\_NAME
* AD\_ADMIN\_USER\_PASSWORD
* ALLOW\_AUTO\_SYNC\_AD\_GROUP\_USERS

To assign values to the profiles,

1. In the upper right corner of the CloudIO homepage, in the menu bar, click ![](/files/-M0w8WNzqhFHRNGdXCRp). The **Navigation** page is displayed.
2. Under the Developer role, click **Manage** **Profile Values**. The **Manage** **Profile Values** page is displayed.

![](/files/-M0w9JY9h43z_vns8dHP)

&#x20;3\. Search the following profiles and set the **Org Value** for each of them:

a. AD\_ADMIN\_USER\_NAME

b. AD\_ADMIN\_USER\_PASSWORD

c. ALLOW\_AUTO\_SYNC\_AD\_GROUP\_USERS

{% hint style="info" %}
**Note: Org Value** represents the value for your company domain. For ALLOW\_AUTO\_SYNC\_AD\_GROUP\_USERS, the value must be set to **Y.**
{% endhint %}

&#x20;4\. Click **Save.**

### To sync **Active Directory** roles

1. In the upper right corner of the CloudIO homepage, in the menu bar, click![](/files/-M0wCzkavMT1IguAYzaa)**. The Navigation** page is displayed.
2. Under the Administration role, click **Manage Roles**. The **Manage Roles** page is displayed.

![](/files/-M0wFtmNjyYrRPfnIxXp)

&#x20;3\. Click on the role to be synced with the **Active Directory**.

The role details page are displayed.

![](/files/-M0wGG4cYtfuYq2CX3sy)

&#x20;4\. In the upper right corner, click **Edit**.

The Edit page is displayed.

![](/files/-M0wGbov4ocXsqubVLzi)

&#x20;5\. From the **Actions** list, select **Sync AD Role**. A confirmation box is displayed.

![](/files/-M0wGrIV3uOj6Y6qD8cU)

&#x20;6\. Click **Yes**. The selected role is synced successfully.

{% hint style="info" %}
**Note:** You must not log out of the CloudIO Platform before the successful syncing of roles. If you require logging out while the syncing of roles is in progress, you must change the initial setup for the authentication provider type.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloudio.io/setting-up-the-cloudio-platform/platform-installation/setting-up-the-active-directory/syncing-roles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
