Issue with Remote User In Remote LDAP Network Admins Group FortiAuthenticator

[jbrunk]

I have it setup that FAUTH is configured for Remote LDAP with my W2012R2 AD server, Everything is working as intended after many hours of troubleshooting issue after issue. So here is my issue. My group that I poll form AD is Network Administrators I have a few users in this group. In Remote users I would like to add them as a local admin user to login the FAUTH.  I went into Remote users user xxxxx profile and updated the User Settings to User Role Administrator--Full Permissions--Allow Radius Authentication is checked.

Tested this and it works great I can not login locally to the FAUTH with mu Creds.

ISSUE= Once I make these changes It breaks my Local Login on the Fortigate, I am not sure why cause I have Allow Radius Authentication checked which still should allow my user to be able to accept radius requests.

I check the Logs and it says that the request from the Fortigate was successful BUT, the Fortigate is reporting invalid user password which I know is not correct cause if I role back settings from Administrator to user i can log into the Fortigate with my AD user.

Does anyone know why this is happening? anyone been able to resolve this issue?

Code version i am using is 4.3 the latest build available. If I have to downgrade I will to fix my issue. This is a test environment so i do not have support on my FAUTH VM.

thanks