New LDAP Group Permissions failed

[thoms27]

Environment

• Python version: 3.8.2
• NetBox version: 2.9.2

Steps to Reproduce

1. Create a group on your AD (ex: g_netbox) and a user (ex: netbox)

2. Under Netbox Administration, create a new group (g_netbox)

3. Under Netbox Administration, add a permission to this group (ex: dcim.view_site):
   

4. Try to logging as user 'netbox'

Expected Behavior

Logging established and only view Site is possible

Observed Behavior

Logging is OK, View Site is not allowed

I have an old group (before the last upgrade (v2.8.0) and it's works.
To complete, if I manually attach the new user to the group in Netbox Administration, it's works :

and

With my old group, it's not necessary to manually attach user to the group.

Regards

[abenedict]

I am seeing the exact same issue.

[crazyman143]

Same issue on 2.9.4.
Anyone know of a fix ?

[pairbear]

Running into a similar issue in 2.9.9 as well

[tyler-8]

I'm running v2.9.10 and have been tinkering with this as I was initially seeing some confusing behavior.

For the most part, everything seems to be working fine with the LDAP group permissions mapping - with the exception of scripts and reports. I can't seem to get a user with View/Add/Change/Delete rights on "scripts" and "reports to be able to access or run either. Both options are greyed out in the menu.

[edit] I'm continuing to look in to this, just putting this info here as notes on my findings/observations

Edit 2:

The running reports & scripts issue was supposedly due to new "run" permissions being required, however adding "run" as described in the docs doesn't seem to be doing it.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. NetBox is governed by a small group of core maintainers which means not all opened issues may receive direct feedback. Please see our contributing guide.

[stale]

This issue has been automatically closed due to lack of activity. In an effort to reduce noise, please do not comment any further. Note that the core maintainers may elect to reopen this issue at a later date if deemed necessary.

[thoms27]

Any news ?

[tyler-8]

Try enabling group mirroring and see if that provides a workable solution. I've tried to summarize a longer thread here: #5442 (comment)