{"statusCode":403,"error":"Forbidden","message":"Forbidden"}to open kibana with AD authentication

Elastic Stack Elasticsearch
3 
User DN: CN=glpi admin,OU=Users,OU=SGPL-Production,DC=sgpltech,DC=com
this is the user DN for AD here group is SGPL-Production but still it shows same error

I modified my role_mapping.file as below:

user:

  • "cn=Users,ou=SGPL-Production,dc=sgpltech,dc=com"
  • "CN=hr086,OU=Users,OU=SGPL-Production,DC=sgpltech,DC=com"

Is there any thing I need to change ?