NX-OS LDAP authorization role assignation

Hi, I need  to configure LDAP on Nexus 9300, all users who will log in needs to be network-admin. I can authenticate but I struggle with the authorization part.

I tough of to ways doing it

1- Add members to Active directory Group, use a ldap-search-map to allow users to login,

SEARCH MAP  map10:
    User Profile :
        BaseDN: MY_OU,DC=TEST,DC=DC,DC=NET
        Attribute Name: memberOf
       Search Filter: (&(name=$userid)(memberOf=CN=My_Group,DC=TEST,DC=DC,DC=NET))

Select allOpen in new window

With map10, only the users in My_Group can log in, They get the default role : network-operator and I did not find a way to change the default-role

2- Add the role in a Active directory attribute Extensionattribute10 in combination with the AD group (shell:roles=network-admin))

SEARCH MAP  map11:
      User Profile :
        BaseDN: MY_OU,DC=TEST,DC=DC,DC=NET
        Attribute Name: Extensionattribute10
       Search Filter: (&(name=$userid)(memberOf=CN=My_Group,DC=TEST,DC=DC,DC=NET))

Select allOpen in new window

map11 is not working

How Can I control who is able to connect and assign a the role network-admin?