I got surprised by a local\admin password lockout today (DEV environment, no harm, no foul). So I tried, for the first time, the LDAP (eDirectory) admin account I added to the role.

It looks like I got logged in to the AdminUI, but was denied access. Big Red Bar saying Permission Denied.

The user can login to the enrollment page ok. I placed the user into the role by type and search, so the system finished the user ID. AdminUI has LDAP Password, that is what is says on the password page.

What did I miss?