I set up LDAP to filter the list of group names displayed by using the filter: (cn=splunk) Set up a security group for each role that you want (e.g., splunk_admins, splunk_users). Or you can use the "Maps_users_directly_to_roles" technique... This didn't work for us as we have too many users and our LDAP heirachy is pretty flat (i.e., we don't have an OU=IT_Dept). The problem I am running into is users within the groups still cannot log in, even though they are listed within the groups in LDAP Strategy. 😞 ... View more