NEXUS-5998: only check role overlap with LDAP when using static mapping, otherwise with dynamic mapping we'd end up making two requests for all users