Thanks for the info, Itried that prior to my post, but that role was not recognized by DFM. Ultimately the issue was that the ID we were trying to add was not part of a specific group on AD and therefore could not be added to DFM with full access. I was not aware that DFM actually checked AD groups.