Werk #19499: LDAP: api groups_to_roles now supports custom user roles
| Component | REST API | ||||||
| Title | LDAP: api groups_to_roles now supports custom user roles | ||||||
| Date | Apr 1, 2026 | ||||||
| Level | Trivial Change | ||||||
| Class | Bug Fix | ||||||
| Compatibility | Compatible - no manual interaction needed | ||||||
| Checkmk versions & editions |
|
The LDAP connection REST API endpoints did not properly handle custom user
roles in the groups_to_roles sync plugin. When creating or updating an LDAP
connection with a custom role (e.g. a cloned built-in role), the request was
rejected because the schema only accepted the three built-in roles.
Additionally, even if a custom role was stored internally, the API response would silently strip it because the response schema also only knew about built-in roles.
Both the request and response schemas now dynamically validate and include custom user roles defined on the site.