A LDAP external Role mapping was removed, but no evidence of removal in any of the logs (including audit.log).
The customer instance is running with Orient database. The support zip from Friday proves the external role existed. Support zip on Monday after shows two external roles missing. Checking all logs between Friday to Monday gives no explanation on why roles were removed. No evidence of any database corruption or any user attempt to delete role.
Customer was able to recover by recreating these roles.
Raising this Jira, to keep track if we see this issue again.