# User Group Management for Multi-groups openBIS Instances

**URL:** <https://community.openbis.ch/t/user-group-management-for-multi-groups-openbis-instances/92>\
**Category:** Installation & maintenance\
**Created:** [11 November 2022 13:46 UTC](https://community.openbis.ch/t/user-group-management-for-multi-groups-openbis-instances/92 "2022-11-11T13:46:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![KristianUllrich](https://dub1.discourse-cdn.com/flex013/user_avatar/community.openbis.ch/kristianullrich/32/11_2.png) [@KristianUllrich](https://community.openbis.ch/u/KristianUllrich)\
**Post date:** [11 November 2022 13:46 UTC](https://community.openbis.ch/t/user-group-management-for-multi-groups-openbis-instances/92/1 "2022-11-11T13:46:46Z")

</div>

Hi,  
I am currently setting up a multi-group instance.  
Anyhow, there is one open question for me, which is related to the documentation:  
" The LDAP service is not only used for authenticating users but also to obtain all users of a group. In the later case an independent query template can be specified by the property `ldap-group-query-template` of the `plugin.properties` of `UserManagementMaintenanceTask` (since 20.10.1.1). The % character in this template will be replaced by the LDAP group key. "

For me it is not clear where to place the property `ldap-group-query-template` does it need to go inside `/openbis/servers/openBIS-server/jetty/etc/service.properties` or do I need to create a `plugin.properties`file?

Thank you for your help

Best regards

Kristian

---

<div class="post-metadata">

**Author:** ![cbarillari](https://dub1.discourse-cdn.com/flex013/user_avatar/community.openbis.ch/cbarillari/32/10_2.png) [@cbarillari](https://community.openbis.ch/u/cbarillari)\
**Post date:** [16 November 2022 18:02 UTC](https://community.openbis.ch/t/user-group-management-for-multi-groups-openbis-instances/92/2 "2022-11-16T18:02:22Z")

</div>

The ldap.queryTemplate is part of the LDAP configuration in the AS service. properties file.

The LDAP group key is specified in the user-management-maintenance-config.json file: [User Group Management for Multi-groups openBIS Instances - openBIS Documentation Rel. 20.10 - Confluence](https://unlimited.ethz.ch/display/openBISDoc2010/User+Group+Management+for+Multi-groups+openBIS+Instances#UserGroupManagementforMultigroupsopenBISInstances-DynamicConfigurations)