API Authentication Permissions

Windows Auth.  Trying to create session.  Added user to admin role on “all zorgs”.  “Item not set to instance of object” (Great error handling Zerto!) is what I get.  Remove role, get “user not found”, so I know it recognizes my role configuration/entry.  Also of interest, in the role when I select the user, it lists it as “undefined” in the ZVM.  WTF?

Logs:

,00000000,,,19-10-16 08:36:31.24,I,166,UsernameValidator,ValidateUsernameHasCorrectFormat,Validating Username xyz,
,00000000,,,19-10-16 08:36:31.24,I,166,LoginManager,Login,using authenticatorType : Zerto.ApplicationServices.Sessions.ValidationsAndPermissions.DomainServicesAuthenticator,
,00000000,,,19-10-16 08:36:31.24,I,166,DomainServicesAuthenticator,ValidateAndAuthorizeUser,”Credentials: User: Username: xyz, Domain: , Password: *******”,
,00000000,,,19-10-16 08:36:31.27,I,166,LocalUsersProxy,GetDomainContext,”using local context for domain Domain: , UserNameSearchString: (&(objectClass=${objectClass})(sAMAccountName=${accountName})), PrincipalSearchString: (&(objectClass=${objectClass})(objectSid=${objectID})), GroupMembershipSearchString: (&(memberOf=${accountName})), SidAttribute: objectSid, AuthenticationType: SSL, LDAPBaseDNs: , DirectoryServicesType: ActiveDirectory, DirectoryServicesProviderInfo: “,

,00000000,,,19-10-16 08:36:45.11,E,166,BasicRestApiErrorHandler,ProvideFault,(running number 637031555379711705) Object reference not set to an instance of an object.,”Zerto.Api.Interfaces.Exceptions.ZertoLoginApiException Void AddSession(Zerto.Api.Interfaces.AddSessionDataApi) Zerto.Api.Interfaces.Exceptions.ZertoLoginApiException: Object reference not set to an instance of an object.
at DynamicModule.ns.Wrapped_ServicesDispatcher_743f52bbc1604cb58ba44312f33de6b6.AddSession(AddSessionDataApi addSessionData)
at SyncInvokeAddSession(Object , Object[] , Object[] )
at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)
at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage41(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage3(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage2(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage1(MessageRpc& rpc)
at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)”