You would need to set ldapRealm.userDnTemplate to map users to roles automatically. See code at https://github.com/apache/zeppelin/blob/master/zeppelin-server/src/main/java/org/apache/zeppelin/server/LdapGroupRealm.java So LdapGroupRealm does filter for groups automatically String searchFilter = "(&(objectClass=groupOfNames)(member=" + userDnTemplate + "))"; ... View more