protected static final String ENTRAID_DEFAULT_GROUPS = "entraid.default.groups";

    /** Configuration key for Entra ID default roles. */
    protected static final String ENTRAID_DEFAULT_ROLES = "entraid.default.roles";

    // Legacy configuration keys for backward compatibility (Azure AD)
    /** Legacy configuration key for Azure AD state time-to-live. */

    }

    /**
     * Processes sub-roles for the specified LDAP user.
     *
     * @param ldapUser the LDAP user to process sub-roles for
     * @param bindDn the bind DN for LDAP connection
     * @param subRoleSet the set of sub-roles to process
     * @param groupFilter the group filter pattern
     * @param roleSet the set of roles to update
     */

# Admin role names for authentication.
authentication.admin.roles=admin

# Default permissions for search roles.
role.search.default.permissions=
# Default display permissions for search roles.
role.search.default.display.permissions={role}guest
# Guest permissions for search roles.
role.search.guest.permissions={role}guest

# Prefix for user roles in search.
role.search.user.prefix=1

labels.facet=Facet
labels.geo=Geo
labels.groups=Groups
labels.hash=Hash
labels.maxSize=Max Size
labels.order=Order
labels.purgeSuggestSearchLogDay=Delete old suggest info
labels.q=Query
labels.roles=Roles
labels.suggestSearchLog=Suggest Search Log
labels.suggestWord=Suggest Word
labels.targetLabel=Label
labels.term=Term
labels.fields=Fields
labels.ex_q=Extended Query
labels.oldPassword=Current Password

labels.facet=Facet
labels.geo=Geo
labels.groups=Groups
labels.hash=Hash
labels.maxSize=Max Size
labels.order=Order
labels.purgeSuggestSearchLogDay=Delete old suggest info
labels.q=Query
labels.roles=Roles
labels.suggestSearchLog=Suggest Search Log
labels.suggestWord=Suggest Word
labels.targetLabel=Label
labels.term=Term
labels.fields=Fields
labels.ex_q=Extended Query
labels.oldPassword=Current Password

    default String[] getAuthenticationAdminRolesAsArray() {
        String[] roles = (String[]) propMap.get(AUTHENTICATION_ADMIN_ROLES);
        if (roles == null) {
            roles = getAuthenticationAdminRoles().split(",");
            propMap.put(AUTHENTICATION_ADMIN_ROLES, roles);
        }
        return roles;
    }

    String getJvmCrawlerOptions();

    }

    @Test
    public void test_buildRoleQuery_withRoles() {
        BoolQueryBuilder boolQuery = QueryBuilders.boolQuery();
        Set<String> roles = Set.of("role1", "role2");

        queryHelper.buildRoleQuery(roles, boolQuery);

        String queryString = boolQuery.toString();
        assertTrue(queryString.contains("role1"));
        assertTrue(queryString.contains("role2"));

labels.geo=Geo
labels.groups=Grupos
labels.hash=Hash
labels.maxSize=Tamaño máximo
labels.order=Orden
labels.purgeSuggestSearchLogDay=Eliminar información de sugerencias anterior
labels.q=Consulta
labels.roles=Roles
labels.suggestSearchLog=Registro de búsqueda para sugerencias
labels.suggestWord=Palabra sugerida
labels.targetLabel=Etiqueta
labels.term=Término de búsqueda
labels.fields=Campos
labels.ex_q=Consulta extendida

labels.geo=Géo
labels.groups=Groupes
labels.hash=Hachage
labels.maxSize=Taille maximale
labels.order=Ordre
labels.purgeSuggestSearchLogDay=Supprimer les anciennes informations de suggestion
labels.q=Requête
labels.roles=Rôles
labels.suggestSearchLog=Journal de recherche de suggestions
labels.suggestWord=Suggérer un mot
labels.targetLabel=Étiquette
labels.term=Terme
labels.fields=Champs
labels.ex_q=Requête étendue

labels.oic_base_url=Base URL
labels.oic_default_groups=Default Groups
labels.oic_default_roles=Default Roles
labels.general_menu_saml=SAML
labels.saml_sp_base_url=SP Base URL
labels.saml_attribute_group_name=Group Attribute Name
labels.saml_attribute_role_name=Role Attribute Name
labels.saml_default_groups=Default Groups
labels.saml_default_roles=Default Roles
labels.general_menu_spnego=SPNEGO
labels.spnego_krb5_conf=Krb5 Config