[JENKINS-43965] AD groups not visible without Overall Administer permission (matrix security)

We are using the AD plugin and granting permissions based on AD groups. Users do not see their groups appear on the user page unless their AD group is granted the Overall Administer permission. That doesn't seem correct.

For example: Jane is in AD-group-Developers. Jane logs in and goes to her user page. No Groups show up. Then, after I add the Overall Administer permission to the AD-group-Developer, Jane sees the AD-group-Developers appear on her user page.

---
Originally reported by tosborn, imported from: AD groups not visible without Overall Administer permission (matrix security)

• assignee: fbelzunc
  
• status: Open
  
• priority: Minor
  
• component(s): active-directory-plugin
  
• label(s): ActiveDirectory, matrix-auth
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 1
  
• imported: 2025-12-07
  

Raw content of original issue

We are using the AD plugin and granting permissions based on AD groups. Users do not see their groups appear on the user page unless their AD group is granted the Overall Administer permission. That doesn't seem correct.


For example: Jane is in AD-group-Developers. Jane logs in and goes to her user page. No Groups show up. Then, after I add the Overall Administer permission to the AD-group-Developer, Jane sees the AD-group-Developers appear on her user page.

• environment: Jenkins ver 2.54, AD plugin ver 2.4