@alien4u Right now, I have a user that's a non-actual-employee user. We used the Celigo documentation to setup a role for that user with the privileges it needed for our attempt at using Celigo. Celigo didn't work for us in the end, but I'm using the same user to hit our newly created RESTlets for doing things like keeping our employee and department information up-to-date. Anytime I want to alter information for any Employee that has the Admin role assigned to it, I get a permissions issue. All other employees are fine. So, I added the Admin role to the user account for the API and it doesn't change anything. With the OAuth 1.0 authentication for the RESTlet endpoints, you don't pass a role ID to it, so there shouldn't be anything to do there (or so I would think)