diff --git a/auth.yaml b/auth.yaml
new file mode 100644
index 0000000..ee8d3e5
--- /dev/null
+++ b/auth.yaml
@@ -0,0 +1,43 @@
+---
+jenkins:
+  disableRememberMe: false
+  securityRealm:
+    ldap:
+      configurations:
+      - inhibitInferRootDN: false
+        rootDN: ${CRED_INFRA_LDAP_ROOT}
+        server: ${CRED_INFRA_LDAP_SERVER}
+        managerDN: ${CRED_INFRA_LDAP_USERNAME}
+        managerPasswordSecret: ${CRED_INFRA_LDAP_PASSWORD}
+        displayNameAttributeName: "gecos"
+  authorizationStrategy:
+    globalMatrix:
+      permissions:
+      - "Overall/Administer:mirantis"
+      - "Overall/Administer:mcp-jenkins"
+
+      - "Overall/Read:anonymous"
+
+      - "Job/Build:mirantis"
+
+      - "Job/Cancel:mirantis"
+
+      - "Job/Configure:mirantis"
+
+      - "Job/Create:mirantis"
+
+      - "Job/Delete:mirantis"
+
+      - "Job/Discover:anonymous"
+
+      - "Job/Workspace:mirantis"
+
+      - "Run/Delete:mirantis"
+
+      - "Run/Replay:mirantis"
+
+      - "Run/Update:mirantis"
+
+      - "Gerrit/Retrigger:mirantis"
+
+      - "View/Read:anonymous"