Mapping Users to Permission Roles

Last updated: September 9, 2026

To learn how to map users and user groups to permission roles in permissions schemes, see the following articles.

For global permissions, see Global Permission Roles.
For OU permissions, see Managing User Permissions on an OU.
For project permissions, see Managing User Permissions on a Project.
For funding source permissions, see Managing User Permissions on a Funding Source.

Automation

You can use our public API to manage large numbers of users and permissions. Specifically, the permission-mapping and permission-scheme endpoints are helpful here. For more information, see Getting Started with the Kion Public API.

It is considered best practice to automatically assign permissions to users using group associations/assertions. This helps ensure that appropriate permissions are always appliedFor more information, see User Group Associations or Microsoft Entra Group Assertions.