AuthHub Azure AD - Post configuration role and usergroup mapping issues

Products

• CloudHealth

Issue/Introduction

If you run into the following issue after configuring the AuthHub Azure AD option please take the actions mentioned under Resolution. 

• "Your user has not been assigned a role. Please contact your CloudHealth administrator." received on signing in or user not assigned to Usergroup matching mapping. 
  
  

Resolution

Please confirm the following for each error listed above and take the recommended steps below:

1. Confirm that the User is assigned to a group that maps to a Classic Role e.g. cloudhealth-administrator, or a group that has been setup to map to a Usergroup. 
   
   
2. Confirm if the impacted User(s) belong to more than 100 groups within Azure AD, this can be done by navigating to Azure Portal -> Entra ID -> Users -> Select Impacted User. This will open the Overview page and the total group membership count can be seen under the "Group memberships" section - 
   
   
   
   
3. Navigate to the Azure Portal -> Entra ID -> Enterprise Applications -> "CloudHealth" -> Permissions
   
   
4. Confirm that the following permissions are in place - 
   
    
5. If any of these permissions are missing you likely performed the migration prior to a bug fix by our Engineering team, to resolve the issue and allow for users with greater than 100 groups to sign in please unconfigure AuthHub Azure AD and then perform the configuration again. This will deploy an updated copy of the Enterprise Application that has the required permissions in order to support users with more than 100 groups.