In Table A.18. LdapExtended Module Options there is option roleFilter with "" default value, but default value is "none", it should be changed.
Moving to ON_QA. The changes should be available for review on the documentation stage within an hour or so from this comment. http://documentation-devel.engineering.redhat.com/site/documentation/en-US/JBoss_Enterprise_Application_Platform/
Verified on stage.