Issue

• When adding an external LDAP/Active Directory group to an internal RBAC group, the external LDAP/AD group is not found or cannot be resolved.

Environment

• CloudBees Jenkins Enterprise - Managed Master (CJE-MM)
• CloudBees Jenkins Enterprise - Operations Center(CJE-OC)
• CloudBees Jenkins Platform - Client Master (CJP-CM)
• CloudBees Jenkins Platform - Operations Center (CJP-OC)
• RBAC plugin
• LDAP plugin OR AD plugin

Resolution

1. Ensure that you have the RBAC plugin installed on the system where you are trying to add the group. This plugin should be on the installed list in the Installed tab of Manage Jenkins> Manage Plugins. If not then you need to manually install it in the Available tab.
2. Ensure that your external AD/LDAP groups are being parsed correctly by clicking on your user name in the top right:
   
   If the external group you have added is not on that list then take a look at Diagnosing AD integration problems or Diagnosing LDAP integration problems:
   
3. Ensure that your RBAC group is not named the same name as the AD/LDAP group. This can cause name parsing issues and confusion
4. Ensure that the names of the external group and internal group are the same and have the same case since both AD and LDAP are case sensitive. This case sensitivity can be turned off on LDAP in the Manage Jenkins> Configure system page under the Case Sensitivity advanced tab: