If in LDAP mode, users not being assign a default role at login

cvat/apps/iam/signals.py

@@ -42,6 +42,9 @@ def create_user(sender, user=None, ldap_user=None, **kwargs):
                     if role == settings.IAM_ADMIN_ROLE:
                         user.is_staff = user.is_superuser = True
                     break
+        # don't need to add default groups for superuser
+        if not (user.is_superuser or user.is_staff):
+            user_groups.append(Group.objects.get(name=settings.IAM_DEFAULT_ROLE))
 
         # It is important to save the user before adding groups. Please read
         # https://django-auth-ldap.readthedocs.io/en/latest/users.html#populating-users