Problem Statement:

The Export CSV button's behavior is more nuanced than a simple enabled/disabled state: it's fully disabled for JWT-only reader groups, but for mixed-authentication groups it silently exports only the Normal and SSO readers while excluding JWT readers, with no indication in the UI that the export is partial. Admins may not realize the exported CSV is incomplete, which risks incorrect assumptions during audits or compliance reviews.

Suggested Enhancement:

Add contextual messaging that covers both cases: (a) a disabled-state tooltip when a group is entirely JWT-authenticated, explaining why, and (b) a visible note or export-summary line when a mixed group's CSV is generated, clarifying that JWT readers were excluded and why.

Customer Benefit:

Prevents admins from unknowingly treating a partial export as a complete reader list, and reduces support tickets from confusion over disabled or incomplete exports.