KACE Product Support

With our K1000 we are able to have users auto assigned a "limited" user role. From there we can go in and advance certain accounts to admin rights for our Techs. We would like to do the same with our K2000. We set the K2000 LDAP to auto assign "read only" rights by default. When going back in with the local admin account though, we see no way to update an ldap AD account to admin rights like we could on K1000. Is there a seperate location to do this or do we only have the auto assigned role option? Even selecting the account and looking at the settings, the area to select the role only lists "read only" and will not let us change to admin.