The automatic role assignment by using LDAP data is fairly straightforward. Switch to the subtab, select a role and the requirements to grant that role to the user. Select the role and one of the methods to read LDAP date (e.g. group membership, user attribute) and save the new rule. You can decide if this configuration is assigned once, added every time the user logs in or even removed if the user fulfills no longer the requirements