The Roles tab refers to the Roles assigned via RBAC Core (i.e. via Dashboard > Users & Roles > Roles, or Dashboard > Users > User > Assign Roles). These assigned roles via RBAC also aren’t visible in the app_metadata
.
The roles in app_metadata
, such as below, refer to the older Authorization extension, while the Roles tab refers to the newer RBAC Core. I understand it can be confusing.
"app_metadata": {
"authorization": {
"groups": [],
"roles": [
"user"
],
"permissions": []
},
"roles": [
"user"
]
},