diff --git a/changelog/unreleased/fix-default-roles-assignment.md b/changelog/unreleased/fix-default-roles-assignment.md
new file mode 100644
index 0000000000..d13ab8581f
--- /dev/null
+++ b/changelog/unreleased/fix-default-roles-assignment.md
@@ -0,0 +1,5 @@
+Bugfix: Correct the default mapping of roles
+
+The default config for the OIDC role mapping was incorrect. Lightweight users are now assignable.
+
+https://github.com/owncloud/ocis/pull/8639
diff --git a/services/proxy/pkg/config/defaults/defaultconfig.go b/services/proxy/pkg/config/defaults/defaultconfig.go
index b6a9fd262a..17d11e9a19 100644
--- a/services/proxy/pkg/config/defaults/defaultconfig.go
+++ b/services/proxy/pkg/config/defaults/defaultconfig.go
@@ -65,7 +65,7 @@ func DefaultConfig() *config.Config {
 					{RoleName: "admin", ClaimValue: "ocisAdmin"},
 					{RoleName: "spaceadmin", ClaimValue: "ocisSpaceAdmin"},
 					{RoleName: "user", ClaimValue: "ocisUser"},
-					{RoleName: "guest", ClaimValue: "ocisGuest"},
+					{RoleName: "user-light", ClaimValue: "ocisGuest"},
 				},
 			},
 		},