You can use Active Directory, OpenLDAP, and 389DS as an external directory server to provide user account and authentication services. If an external directory server is being used, the oVirt engine uses these directory services to receive user and group information when assigning permissions for roles.