Hi @sakshi1  As @richgalloway suggested, this sounds like the local role isnt mapped correctly to the SAML role, or it could be that if you've used a Role Alias in the SAML configuration (https://yoursplunkinstance/en-US/manager/launcher/saml/configuration) then it could be using the incorrect role alias. You might find that using Google Chrome's Developer tool 'SAML' tab is helpful for diagnosing this as you can see the full SAML response which should list the roles. You can then compare the role field name against the SAML Configuration/Alias and the value against the local mapping. Note that sometimes (e.g. Azure/EntraID) it is a role GUID that is presented instead of the friendly name, its this GUID which you will need to map. 🌟 Did this answer help you? If so, please consider: Adding karma to show it was useful Marking it as the solution if it resolved your issue Commenting if you need any clarification Your feedback encourages the volunteers in this community to continue contributing ... View more