Hi @splunkceh , to change the role of an user, when using the LDAP authentication, you have to move it in a different AD group outside Splunk. In Splunk you can only associate a role to an AD Group, not move users from groups or change role to an user. Ciao. Giuseppe
... View more