# \[UserChown\] Groups cannot be manually managed for auth driver ldap
**URL:** https://forum.opennebula.io/t/userchown-groups-cannot-be-manually-managed-for-auth-driver-ldap/3709
**Category:** Product Support
**Created:** [February 3, 2017, 9:05am UTC](https://forum.opennebula.io/t/userchown-groups-cannot-be-manually-managed-for-auth-driver-ldap/3709 "2017-02-03T09:05:50Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@simon.leroux](https://forum.opennebula.io/u/simon.leroux)
#### Post date: [February 3, 2017, 9:05am UTC](https://forum.opennebula.io/t/userchown-groups-cannot-be-manually-managed-for-auth-driver-ldap/3709/1 "2017-02-03T09:05:50Z")
Hi all,
I started up with a Sandbox an changing groups for LDAP users was possible. Now i’ve added a production environment, I can’t change ldap user group :
Log /var/log/one/oned.log
[UserChown] Groups cannot be manually managed for auth driver ldap
When I do the same thing with a core user it works fine…
Can you help me out please ?
Thanks
BR
---
### Author:  [@ruben](https://forum.opennebula.io/u/ruben)
#### Post date: [February 9, 2017, 3:03pm UTC](https://forum.opennebula.io/t/userchown-groups-cannot-be-manually-managed-for-auth-driver-ldap/3709/2 "2017-02-09T15:03:45Z")
By default if groups are set by the drivers they cannot be changed manually, to try to keep them consistent
If you want to change that behavior update oned.conf to read:
DRIVER\_MANAGED\_GROUPS = NO
Then groups will not be updated by the driver but can be changed
---
### Author:  [@simon.leroux](https://forum.opennebula.io/u/simon.leroux)
#### Post date: [March 13, 2017, 12:32pm UTC](https://forum.opennebula.io/t/userchown-groups-cannot-be-manually-managed-for-auth-driver-ldap/3709/3 "2017-03-13T12:32:21Z")
Hi Ruben,
Sorry I didn’t see your message ! I’ve just tested and it works !! Thank you 🙂
BR