dosubot[bot] commented on issue #35687: URL: https://github.com/apache/superset/issues/35687#issuecomment-3410388620
<!-- Greeting --> Hi @lqy1992! I'm [Dosu](https://go.dosu.dev/dosubot) and Iām helping the superset team. <!-- Answer --> This issue is likely caused by how roles and permissions are assigned during LDAP integration. Superset relies on configuration settings like `AUTH_ROLE_ADMIN` and `AUTH_USER_REGISTRATION_ROLE` to determine which users get admin rights and what default roles are assigned after LDAP sync. If these settings are missing or misconfigured, even the default admin account can lose access to admin features like the user list. Check your `superset_config.py` or `config.py` to ensure: - `AUTH_ROLE_ADMIN` is set to the correct admin role name (usually `'Admin'`). - `AUTH_USER_REGISTRATION_ROLE` is set to a role with sufficient permissions if you allow self-registration. - Your LDAP group-to-role mapping (if used) correctly assigns the `'Admin'` role to the intended users. If these are not set, LDAP users (including the admin) may be assigned the default `'Public'` role, which cannot access user management features. You can find these settings and their effects in the main config and security manager code ([config.py](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/config.py), [security/manager.py](https://github.com/apache/superset/blob/829e4d92d91ceae4b43b1ed3b063ffe45377799c/superset/security/manager.py)). After updating your config, restart Superset and re-sync roles. This should restore admin access and resolve the "Access is Denied" errors for the user list and account info. <!-- Dosu Comment Footer --> *To reply, just mention [@dosu](https://go.dosu.dev/dosubot).* --- <sup>How did I do? [Good](https://app.dosu.dev/response-feedback/c8ad1aae-eefd-49d7-8d63-e258953e1514?feedback_type=great_response) | [Irrelevant](https://app.dosu.dev/response-feedback/c8ad1aae-eefd-49d7-8d63-e258953e1514?feedback_type=irrelevant_answer) | [Incorrect](https://app.dosu.dev/response-feedback/c8ad1aae-eefd-49d7-8d63-e258953e1514?feedback_type=incorrect_sources) | [Verbose](https://app.dosu.dev/response-feedback/c8ad1aae-eefd-49d7-8d63-e258953e1514?feedback_type=too_verbose) | [Hallucination](https://app.dosu.dev/response-feedback/c8ad1aae-eefd-49d7-8d63-e258953e1514?feedback_type=hallucination) | [Report š](https://app.dosu.dev/response-feedback/c8ad1aae-eefd-49d7-8d63-e258953e1514?feedback_type=bug_report) | [Other](https://app.dosu.dev/response-feedback/c8ad1aae-eefd-49d7-8d63-e258953e1514?feedback_type=other)</sup> [](https://app.dosu.dev/a28d3c7e-a9d3-459e-9fb6-3a6f9ff4f357/ask?utm_source=githu b) [](https://go.dosu.dev/discord-bot) [](https://twitter.com/intent/tweet?text=%40dosu_ai%20helped%20me%20solve%20this%20issue!&url=https%3A//github.com/apache/superset/issues/35687) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
