diff --git a/attribute-endpoints-provider/src/main/java/de/ccc/hamburg/keycloak/attribute_endpoints/AttributeEndpointsResourceProvider.java b/attribute-endpoints-provider/src/main/java/de/ccc/hamburg/keycloak/attribute_endpoints/AttributeEndpointsResourceProvider.java
index bd98b30..15303dc 100644
--- a/attribute-endpoints-provider/src/main/java/de/ccc/hamburg/keycloak/attribute_endpoints/AttributeEndpointsResourceProvider.java
+++ b/attribute-endpoints-provider/src/main/java/de/ccc/hamburg/keycloak/attribute_endpoints/AttributeEndpointsResourceProvider.java
@@ -109,6 +109,7 @@ public class AttributeEndpointsResourceProvider implements RealmResourceProvider
 
         UserModel authUser = auth.getUser();
         if (!authUser.hasRole(authRole)) {
+            LOG.info("User " + authUser.getUsername() + " does not have required role " + authRole.getName());
             throw new ForbiddenException("User does not have required auth role.");
         }