---
title: "Sync users ABAC attributes from LDAP"
slug: "sync-users-abac-attributes-from-ldap"
updated: 2026-09-03T14:50:33Z
published: 2026-09-03T14:50:33Z
canonical: "developer.rocket.chat/sync-users-abac-attributes-from-ldap"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://developer.rocket.chat/llms.txt
> Use this file to discover all available pages before exploring further.

# Sync users ABAC attributes from LDAP

Post/api/v1/abac/users/sync![Defense](https://raw.githubusercontent.com/RocketChat/Rocket.Chat-Open-API/main/images/Defense.svg)

- Syncs ABAC attributes for specified users from LDAP.
- Refreshes user ABAC attributes by reading current data from LDAP and applying the configured LDAP → ABAC attribute mapping.
- Users can be identified by usernames, ids, emails, or ldapIds.
- Requires the LDAP Enterprise and ABAC licenses, the `abac-management` and `manage-abac-admin-room-attributes` permissions, and the global setting `ABAC_Enabled` to be turned on.

### Changelog

| Version | Description |
| --- | --- |
| 8.0.0 | Added |
| 8.5.0 | Added the `manage-abac-admin-room-attributes` granular permission requirement. |

Header parametersX-Auth-TokenstringRequired

The `authToken` of the authenticated user.

ExampleRScctEHSmLGZGywfIhWyRpyofhKOiMoUIpimhvheU3f
X-User-IdstringRequired

The `userId` of the authenticated user.

ExamplerbAXPnMktTFbNpwtJ

Body parameters

At least one of these properties is required:

- usernames (string[]) — Array of Rocket.Chat usernames (1–100 items, unique)
- ids (string[]) — Array of Rocket.Chat user IDs (1–100 items, unique)
- emails (string[]) — Array of email addresses (1–100 items, unique)
- ldapIds (string[]) — Array of LDAP IDs (1–100 items, unique)

<select class='api-response-data' aria-label='Media type'><option value='49e540c0-2d4f-405a-ae04-2a35c057f11e'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='acedc41f-b59c-4f7b-8c8e-f64d2b07e156'>Example 1</option>
</select>Example 1

```json
{
  "usernames": [
    "alice"
  ],
  "ids": [
    "userId1"
  ],
  "emails": [
    "bob@example.com"
  ],
  "ldapIds": [
    "ldapId123"
  ]
}
```

object  usernames Array of string   string    
ids Array of string   string    
emails Array of string   string    
ldapIds Array of string   string    

Responses200

OK

<select class='api-response-data' aria-label='Media type'><option value='5d521029-49fa-4f5d-83fa-aad236d02f35'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='c2eae4fe-005a-49c5-8cd3-751afd15cccb'>Success</option>
</select>Success

```json
{
  "success": true
}
```

object  successboolean    

400

Bad Request

<select class='api-response-data' aria-label='Media type'><option value='4f75eeef-2264-47fd-9fc2-0f338cba9ef4'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='81b43509-ebf5-47d2-94be-867b0ec1d48d'>ABAC disabled</option>
<option value='d5b61a53-da1b-4de0-8ada-1bb1a4d20fcc'>Invalid body (schema validation)</option>
</select>ABAC disabled

```json
{
  "success": false,
  "error": "error-abac-not-enabled"
}
```

Invalid body (schema validation)

```json
{
  "success": false,
  "error": "error-invalid-body-params"
}
```

object  successboolean    
errorstring    

401

Unauthorized

<select class='api-response-data' aria-label='Media type'><option value='9261437c-6b05-4ae9-b891-c09ea399f779'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='5d43989b-97bf-423b-9a6d-f7872390c178'>Unauthorized login attempt</option>
</select>Unauthorized login attempt

```json
{
  "success": false,
  "error": "error-unauthorized"
}
```

object  successboolean    
errorstring    

403

Forbidden

<select class='api-response-data' aria-label='Media type'><option value='b742728b-7bdb-4273-a375-1a0e03f41426'>application/json</option>
</select><select class='select-example' aria-label='Media type'><option value='f7aa5bd9-5b08-4ceb-b2c7-b61d02a8778b'>Missing required ABAC permissions</option>
</select>Missing required ABAC permissions

```json
{
  "success": false,
  "error": "error-not-authorized"
}
```

object  successboolean    
errorstring