After creating a new role in Syncope, and assigning that role to an LDAP resource, i added some Syncope entitlements to the new role. The entitlements were saved to the Syncope database, but upon the following synchronization with LDAP, the entitlements were removed.
Create role (newrole) in syncope
Assign ldap as a resource to newrole
Assign entitlements to newrole
Wait for next LDAP synchronization task
Examine newrole entitlements (they are empty for me)