AD user should not be able to change DX1 Reporting rights for a SQL user and vice versa
It should not be possible to set permissions for AD users by DXE user and vise versa. AD user - Superadmin should not be possible to set permissions for DXE users