Only users assigned to the Splunk AppDynamics role Account Owner can configure SAML authentication in the Controller and assign other users to the Account Owner role. Roles govern user privileges in the Controller. See Roles and Permissions.