Thank you, @akouki_splunk! That's it. The on-prem Splunk instance uses SAML authentication so I get automatically assigned both "admin" and "user" roles from my group memberships. The "user" role was in the "blacklisted_roles" list, which caused the error. Thank you for the quick response!   ... View more

Open to a better solution, but this will be good enough for now...I also tried PDF Report Capture for Splunk but could not get that working on 7.3.0 in an usable way... ... View more