### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

I went to `https://docs.litellm.ai/docs/proxy/admin_ui_sso` to configure role assignment for our Generic OIDC provider, and followed the path **"Generic SSO Provider" > "Assigning User Roles via SSO"** (the section for `GENERIC_USER_ROLE_ATTRIBUTE`). That section lists:

``` - `proxy_admin` - Admin over the platform - `proxy_admin_viewer` - Can login, view all keys, view all spend (read-only) - `internal_user` - Can login, view/create/delete their own keys, view their spend - `internal_user_view_only` - Can login, view their own keys, view their own spend ```

I configured our IdP's role claim using `internal_user_view_only` exactly as documented there. This value **does not exist anywhere** as a valid LiteLLM role — not in `LitellmUserRoles` (`litellm/proxy/_types.py`), and not in the canonical role reference either (`docs/proxy/access_control.md#global-proxy-roles`, which this very section links to as "the" supported role list). The actual value the proxy checks against is `internal_user_viewer`.

**Additional inconsistency found while cross-…