# Cannot save attributes for LDAP user

**URL:** <https://forum.keycloak.org/t/cannot-save-attributes-for-ldap-user/23303>\
**Category:** Configuring the server\
**Created:** [November 9, 2023, 8:59pm UTC](https://forum.keycloak.org/t/cannot-save-attributes-for-ldap-user/23303 "2023-11-09T20:59:01Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Lars](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/lars/32/6114_2.png) [@Lars](https://forum.keycloak.org/u/Lars)\
**Post date:** [November 9, 2023, 8:59pm UTC](https://forum.keycloak.org/t/cannot-save-attributes-for-ldap-user/23303/1 "2023-11-09T20:59:01Z")

</div>

Hi all,

I have a LDAP user federation, with _edit mode_ set to READONLY, since I don´t want to write changes on username, email, first name, last name, and other mapped attributes back to the LDAP.

Now when I try to add a new attribute to a user of that user federation, I get a “Error updating group User is read only!”.

I´m a bit confused , since the documentation states for edit mode READONLY:

> You cannot change the username, email, first name, last name, and other mapped attributes. Keycloak shows an error anytime a user attempts to update these fields.

But the attribute I tried to add is definitely not a mapped attribute.

Is this a bug?

Regards  
Lars