keycloak-scim/server_admin/topics/roles-groups/proc-assigning-role-mappings.adoc

[id="proc-assigning-role-mappings_{context}"]

= Assigning role mappings
[role="_abstract"]
You can assign role mappings to a user through the *Role Mappings* tab for that user.

.Procedure
. Click *Users* in the menu.
. Click the user that you want to perform a role mapping on. If the user is not displayed, click *View all users*.
. Click the *Role Mappings* tab.
. Click the role you want to assign to the user in the *Available Roles* box.
. Click *Add selected*.

.Role mappings
image:{project_images}/user-role-mappings.png[Role mappings]

In the preceding example, we are assigning the composite role *developer* to a user. That role was created in the <<_composite-roles, Composite Roles>> topic.

.Effective role mappings
image:{project_images}/effective-role-mappings.png[Effective role mappings]

When the *developer* role is assigned, the *employee* role associated with the *developer* composite is displayed in the *Effective Roles* box. *Effective Roles* are the roles explicitly assigned to users and roles that are inherited from composites.