From 9734172196d3988c25567c86bbf3780c7ea5f72c Mon Sep 17 00:00:00 2001
From: Bryan Frimin <bryan@getprobo.com>
Date: Mon, 5 Jan 2026 21:53:29 +0100
Subject: [PATCH] Update default SAML role to employee

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
---
 pkg/iam/saml/service.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/iam/saml/service.go b/pkg/iam/saml/service.go
index 938483427..04cff16cb 100644
--- a/pkg/iam/saml/service.go
+++ b/pkg/iam/saml/service.go
@@ -301,7 +301,7 @@ func (s *Service) HandleAssertion(
 					ID:             gid.New(config.ID.TenantID(), coredata.MembershipEntityType),
 					IdentityID:     identity.ID,
 					OrganizationID: config.OrganizationID,
-					Role:           coredata.MembershipRoleViewer,
+					Role:           coredata.MembershipRoleEmployee,
 					Source:         coredata.MembershipSourceSAML,
 					State:          coredata.MembershipStateActive,
 					CreatedAt:      now,