SonarQube admin access -not staying associated to admin group

[DerekRobards]

Latest version of SonarQube Developer Edition. We have run into an issue where the users being assigned to the administrative group are not staying associated to this group. Then, the users cannot use administrative groups privileges. No further details were provided, except that there are no further changes and yet this happens. Any ideas what to check?

[Colin]

Hey there.

Are you using a means of Delegated Authentication (LDAP, SAML, GitHub, etc.) and also using group mapping?

Group persitence problem

Hey there. Are you also delegating authentication to an external identity provider like LDAP? As noted in the documentation on Delegated Authentication: When group mapping is configured, the delegated authentication source becomes the only place to manage group membership, and the user’s groups are re-fetched with each log in. Meaning that if you are manually managing group membership and have ldap.group.* parameters configured, group membership will be revoked for users upon login if that …

[DerekRobards]

Colin,

Thank you sir. We are only using GitHub Enterprise for SSO but delegation of permissions is being done by using the built-in sonar groups:

• sonar users
• sonar administrators

Github Enterprise is not being used to delegate permissions.

[Colin]

In that case, I would double check that sonar.auth.github.groupsSync is disabled in your DevOps Platform Integrations > GitHub > GitHub Authentication configuration.

[DerekRobards]

Colin,

Thank you. Our Cloud Engineer is checking that asap when he has bandwidth. I will update if that did it or not post facto.

[DerekRobards]

So far, so good. looks like that config. change worked.
Thank you Colin.