Domain or Group Based Roles #4305

New Issue

OVERLORD · 2026-02-05T08:29:55+03:00

OVERLORD commented

2026-02-05 08:29:55 +03:00

Originally created by @HoleInTheSeat on GitHub (Nov 7, 2023).

Describe the feature you'd like

A way to have a certain role applied to the user on registration based on either the email domain or the google group.

Describe the benefits this would bring to existing BookStack users

This would allow easier user management by having the correct roles set to each user as intended, rather than manually changing the role after the user has registered.

Can the goal of this request already be achieved via other means?

Not to my Knowledge.

Have you searched for an existing open/closed issue?

I have searched for existing issues and none cover my fundamental request

How long have you been using BookStack?

1 to 5 years

Additional context

No response

Originally created by @HoleInTheSeat on GitHub (Nov 7, 2023). ### Describe the feature you'd like A way to have a certain role applied to the user on registration based on either the email domain or the google group. ### Describe the benefits this would bring to existing BookStack users This would allow easier user management by having the correct roles set to each user as intended, rather than manually changing the role after the user has registered. ### Can the goal of this request already be achieved via other means? Not to my Knowledge. ### Have you searched for an existing open/closed issue? - [X] I have searched for existing issues and none cover my fundamental request ### How long have you been using BookStack? 1 to 5 years ### Additional context _No response_

OVERLORD added the 🔨 Feature Request label 2026-02-05 08:29:55 +03:00

OVERLORD closed this issue

2026-02-05 08:29:59 +03:00

OVERLORD commented

2026-02-05 08:30:02 +03:00

@ssddanbrown commented on GitHub (Nov 7, 2023):

We support group/role sync via OIDC/LDAP/SAML2, as long as the auth system can provide roles/groups in a fairly standard format.

Alternatively, I have a simplistic example in my comment here of using the logical theme system as a method to achieve this: https://github.com/BookStackApp/BookStack/issues/1904#issuecomment-848829004
This could be customized to apply any custom logic really.

Otherwise, this is not something I'd be too keen to implement since I'm hesitant to expand authentication features where there's little demand, especially where the desired logic may be quite specific or require extra in-app controls to maintain.

@ssddanbrown commented on GitHub (Nov 7, 2023): We support group/role sync via OIDC/LDAP/SAML2, as long as the auth system can provide roles/groups in a fairly standard format. Alternatively, I have a simplistic example in my comment here of using the logical theme system as a method to achieve this: https://github.com/BookStackApp/BookStack/issues/1904#issuecomment-848829004 This could be customized to apply any custom logic really. Otherwise, this is not something I'd be too keen to implement since I'm hesitant to expand authentication features where there's little demand, especially where the desired logic may be quite specific or require extra in-app controls to maintain.

OVERLORD commented

2026-02-05 08:30:04 +03:00

@HoleInTheSeat commented on GitHub (Nov 8, 2023):

We support group/role sync via OIDC/LDAP/SAML2, as long as the auth system can provide roles/groups in a fairly standard format.

Alternatively, I have a simplistic example in my comment here of using the logical theme system as a method to achieve this: #1904 (comment) This could be customized to apply any custom logic really.

Otherwise, this is not something I'd be too keen to implement since I'm hesitant to expand authentication features where there's little demand, especially where the desired logic may be quite specific or require extra in-app controls to maintain.

Thanks, Ill take a look at this and see if I can make it suite my needs. Much appreciated!

@HoleInTheSeat commented on GitHub (Nov 8, 2023): > We support group/role sync via OIDC/LDAP/SAML2, as long as the auth system can provide roles/groups in a fairly standard format. > > Alternatively, I have a simplistic example in my comment here of using the logical theme system as a method to achieve this: [#1904 (comment)](https://github.com/BookStackApp/BookStack/issues/1904#issuecomment-848829004) This could be customized to apply any custom logic really. > > Otherwise, this is not something I'd be too keen to implement since I'm hesitant to expand authentication features where there's little demand, especially where the desired logic may be quite specific or require extra in-app controls to maintain. Thanks, Ill take a look at this and see if I can make it suite my needs. Much appreciated!

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#4305