diff --git a/src/main/java/com/nike/cerberus/service/AuthenticationService.java b/src/main/java/com/nike/cerberus/service/AuthenticationService.java index d9106c0c1..538f1890d 100644 --- a/src/main/java/com/nike/cerberus/service/AuthenticationService.java +++ b/src/main/java/com/nike/cerberus/service/AuthenticationService.java @@ -217,6 +217,8 @@ public IamRoleAuthResponse authenticate(IamRoleCredentialsV2 credentials) { if (getAdminRoleArnSet().contains(iamRoleArn)) { meta.put(VaultAuthPrincipal.METADATA_KEY_IS_ADMIN, Boolean.toString(true)); groups.add("admin-iam-principals"); + } else { + meta.put(VaultAuthPrincipal.METADATA_KEY_IS_ADMIN, Boolean.toString(false)); } meta.put(VaultAuthPrincipal.METADATA_KEY_GROUPS, StringUtils.join(groups, ','));