Re: [HTCondor-users] Restricting usage based on Linux / LDAP / Active Directory group

[Jaime Frey <jfrey@xxxxxxxxxxx>]

HTCondor doesnât have a special option for this case, but you can implement it as part of the START _expression_ for the node:

AllowedUsers = "alice@xxxxxxx, bob@xxxxxxx, charles@xxxxxxx"

STARTD_ATTRS = $(STARTD_ATTRS) AllowedUsers

START = $(START) && StringListMember(TARGET.User, AllowedUsers)

 - Jaime

On Feb 27, 2026, at 9:45âAM, Weatherby,Gerard via HTCondor-users <htcondor-users@xxxxxxxxxxx> wrote:

We have a compute node  we restrict usage to based on membership in an Active Directory (LDAP) group. Is the a setting to implement this?

If not, is there a way to have an allowlist of account names that can start jobs?