When auto-provisioned custom role to access AI agent doesn't work

Summary:

We successfully created a custom role for users to access and work with the AI benefits agent. The agent is available to users in ME>AI Agent Studio as well as on an embedded guided journey - But ONLY IF the role is manually assigned in the security console.

Content (please ensure you mask any confidential information):

When we auto-provision the custom role to the entire population, it shows in their user account, but they are not able to see the agents. If we delete the auto-provisioned role and save and then go back and manually add the role, it works. This will make it impossible to roll out the use of any AI agents if we cannot get this working through auto-provisioning. We don't typically need to run any processes after auto-provisioning, but have run all of the LDAP processes to see if it helped - it did not.