# User only gets mapped to a subset of their roles

**URL:** <https://forum.opensearch.org/t/user-only-gets-mapped-to-a-subset-of-their-roles/15488>\
**Category:** Security\
**Tags:** troubleshoot\
**Created:** [August 9, 2023, 12:54pm UTC](https://forum.opensearch.org/t/user-only-gets-mapped-to-a-subset-of-their-roles/15488 "2023-08-09T12:54:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mgelszinnis](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@mgelszinnis](https://forum.opensearch.org/u/mgelszinnis)\
**Post date:** [August 9, 2023, 12:54pm UTC](https://forum.opensearch.org/t/user-only-gets-mapped-to-a-subset-of-their-roles/15488/1 "2023-08-09T12:54:16Z")

</div>

**Versions** (relevant - OpenSearch/Dashboard/Server OS/Browser):

OpenSearch/OpenSearch Dashboards 2.8.0  
Server: RHEL 8  
Chrome Browser

**Describe the issue** :  
We have a user who only gets a subset of their roles mapped to them. I.e. they have roles1-8 in our LDAP and only roles 1-4 show up under “view roles and identities”. I have confirmed that the opensearch roles for the LDAP groups 5-8 do exist and it seems that no other user has the same issue. A restart of opensearch and opensearch dashboards had no impact on this issue.  
I am stumped on what I could try next, the logs also did not report any issue that I could find. It seems very weird to me that this issue only impacts a single user out of at least 20 and only some roles do not get mapped to this specific user.

Where could I look next or what could I try?

**Configuration** :  
OpenSearch directly fetches the roles and users from our LDAP. A single role in OpenSearch is mapped to a single LDAP group

**Relevant Logs or Screenshots** :

---

<div class="post-metadata">

**Author:** ![Mantas](https://avatars.discourse-cdn.com/v4/letter/m/7bcc69/32.png) [@Mantas](https://forum.opensearch.org/u/Mantas)\
**Post date:** [August 9, 2023, 4:12pm UTC](https://forum.opensearch.org/t/user-only-gets-mapped-to-a-subset-of-their-roles/15488/2 "2023-08-09T16:12:20Z")

</div>

Hi mgelszinnis,

Could you please share your `config.yml` and `roles_mapping.yml` files, also please provide an output of the below:

`GET /_plugins/_security/api/securityconfig`

```auto

curl --insecure -u <ldapuser> https://<OpenSearch_node>:9200/_plugins/_security/authinfo?pretty

```

Thanks,  
Mantas

---

<div class="post-metadata">

**Author:** ![mgelszinnis](https://avatars.discourse-cdn.com/v4/letter/m/d9b06d/32.png) [@mgelszinnis](https://forum.opensearch.org/u/mgelszinnis)\
**Post date:** [August 14, 2023, 7:24am UTC](https://forum.opensearch.org/t/user-only-gets-mapped-to-a-subset-of-their-roles/15488/3 "2023-08-14T07:24:42Z")

</div>

The solution was to rerun securityadmin.sh with our security configuration. After that the issue stopped.