fix LDAP Grafana admin logic

Co-authored-by: Adrien Fillon <adrien.fillon@cdiscount.com>
Co-authored-by: Remi Buisson <remi.buisson@cdiscount.com>

pkg/login/ldap.go

@@ -185,9 +185,11 @@ func (a *ldapAuther) GetGrafanaUserFor(ctx *m.ReqContext, ldapUser *LdapUserInfo
 
 
 		if ldapUser.isMemberOf(group.GroupDN) {
 		if ldapUser.isMemberOf(group.GroupDN) {
 			extUser.OrgRoles[group.OrgId] = group.OrgRole
 			extUser.OrgRoles[group.OrgId] = group.OrgRole
+			if extUser.IsGrafanaAdmin == nil || *extUser.IsGrafanaAdmin == false {
 				extUser.IsGrafanaAdmin = group.IsGrafanaAdmin
 				extUser.IsGrafanaAdmin = group.IsGrafanaAdmin
 			}
 			}
 		}
 		}
+	}
 
 
 	// validate that the user has access
 	// validate that the user has access
 	// if there are no ldap group mappings access is true
 	// if there are no ldap group mappings access is true