From e101bba140f4a28c8d679d0d9a6bb7c01800f28d Mon Sep 17 00:00:00 2001
From: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com>
Date: Fri, 17 Jul 2026 07:28:15 -0500
Subject: [PATCH] add note about auth debugging

---
 docs/docs/configuration/authentication.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/docs/docs/configuration/authentication.md b/docs/docs/configuration/authentication.md
index a565398774..94d46dba07 100644
--- a/docs/docs/configuration/authentication.md
+++ b/docs/docs/configuration/authentication.md
@@ -262,6 +262,19 @@ In this example:
 
 - Admin precedence: if the `admin` mapping matches, Frigate resolves the session to `admin` to avoid accidental downgrade when a user belongs to multiple groups (for example both `admin` and `viewer` groups).
 
+:::note
+
+If a user isn't getting the role you expect, enable debug logging to see exactly what headers Frigate is receiving from your proxy:
+
+```yaml
+logger:
+  default: info
+  logs:
+    frigate.api.auth: debug
+```
+
+:::
+
 #### Port Considerations
 
 **Authenticated Port (8971)**