QueryBuilder rolesFilter = request.buildFilterQuery("roles", Arrays.asList("role1"));
        QueryBuilder fieldsFilter = request.buildFilterQuery("fields", Arrays.asList("field1"));

        assertTrue("Tags filter should contain 'tags'", tagsFilter.toString().contains("tags"));
        assertTrue("Roles filter should contain 'roles'", rolesFilter.toString().contains("roles"));

type wholeBitrotReader struct {
	disk       StorageAPI
	volume     string
	filePath   string
	verifier   *BitrotVerifier // Holds the bit-rot info
	tillOffset int64           // Affects the length of data requested in disk.ReadFile depending on Read()'s offset
	buf        []byte          // Holds bit-rot verified data
}

func (b *wholeBitrotReader) ReadAt(buf []byte, offset int64) (n int, err error) {
	if b.buf == nil {

String[] roles = new String[]{"admin", "user"};

SuggestItem item = new SuggestItem(
    new String[]{"Search Engine", "検索エンジン"}, // text variations
    readings,                                      // pronunciation readings
    1,                                            // boost score
    tags,                                         // categorization tags

		Avg:  a.Avg,
		Max:  a.Max,
	}
	return w
}

// QStat holds queue stats for replication
type QStat struct {
	Count float64 `json:"count"`
	Bytes float64 `json:"bytes"`
}

func (q *QStat) add(o QStat) QStat {
	return QStat{Bytes: q.Bytes + o.Bytes, Count: q.Count + o.Count}
}

// InQueueMetric holds queue stats for replication
type InQueueMetric struct {
	Curr QStat `json:"curr" msg:"cq"`

        fessConfig.setSystemProperty("oic.base.url", form.oicBaseUrl);
        fessConfig.setSystemProperty("oic.default.groups", form.oicDefaultGroups);
        fessConfig.setSystemProperty("oic.default.roles", form.oicDefaultRoles);

        // SAML
        fessConfig.setSystemProperty("saml.sp.base.url", form.samlSpBaseUrl);
        fessConfig.setSystemProperty("saml.attribute.group.name", form.samlAttributeGroupName);

            false, false, false, "Long", 0, 0, null, null, false, null, null, null, null, null, false);
    protected final ColumnInfo _columnRoles = cci("roles", "roles", null, null, String[].class, "roles", null, false, false, false,
            "keyword", 0, 0, null, null, false, null, null, null, null, null, false);

    "docFreq": {
      "type": "long"
    },
    "fields": {
      "type": "keyword"
    },
    "kinds": {
      "type": "keyword"
    },
    "queryFreq": {
      "type": "long"
    },
    "roles": {
      "type": "keyword"
    },
    "languages": {
      "type": "keyword"
    },
    "score": {
      "type": "double"
    },
    "tags": {
      "type": "keyword"
    },
    "text": {

   * a "hole" in it so that set tests of {@code ContiguousSet} can suppress them with {@code
   * FeatureSpecificTestSuiteBuilder.suppressing()}.
   */
  /*
   * TODO(cpovirk): or we could make HOLES_FORBIDDEN a feature. Or we could declare that
   * implementations are permitted to throw IAE if a hole is requested, and we could update

    }

    public void setRoles_Terms(ConditionOptionCall<TermsAggregationBuilder> opLambda) {
        setRoles_Terms("roles", opLambda, null);
    }

    public void setRoles_Terms(ConditionOptionCall<TermsAggregationBuilder> opLambda, OperatorCall<BsSearchLogCA> aggsLambda) {
        setRoles_Terms("roles", opLambda, aggsLambda);
    }

  - Included Client Audience: security-admin-console

#### Adding 'admin' Role

- Go to Roles
  - Add new Role `admin` with Description `${role_admin}`.
  - Add this Role into compositive role named `default-roles-{realm}` - `{realm}` should be replaced with whatever realm you created from `prerequisites` section. This role is automatically trusted in the 'Service Accounts' tab.