The roles displayed in the Manage-->Roles UI for jasper server are converted to upper-case and have their spaces replaced with underscores. The default settings for JSLdapAuthenticationProvider also convert a group's name to uppercase but *do not replace the spaces with underscores*. This makes things needlessly confusing.
When I was setting up LDAP integration, I was able to map an AD group called "Group Jasperserver Admins" to a role called "ROLE_GROUP JASPERSERVER ADMINS". But in the UI it looked like "ROLE_GROUP_JASPERSERVER_ADMINS". I then set up the organizationRoleMap property of MTExternalUserSetupProcessor to use the name with underscores and of course it didn't work. It took a long time to figure out why.
Please update the roles UI to show the the role names as they actually are.