Hello, team. I integrated LDAP-based authentication/authorization to StarRocks using Security Integration, Apache Ranger, and a group provider. However, when using the impersonate, it seems like that a user account created directly in StarRocks using the

CREATE USER

statement is required.

CREATE USER tom IDENTIFIED WITH authentication_ldap_simple AS 'uid=tom,ou=company,dc=example,dc=com'

But when creating accounts this way, the group provider becomes invalid, and authentication succeeds as long as the account exists in LDAP. Is there a better way to use impersonate without creating accounts manually?