Hmm OK. I have this in my Users section of the UI. The two users have been added before turning on AD Auth.
when I go to Add a user there is no place I can search for a principal in AD and I don't see the link in the properties. And the only way I can login using the Rancher CLI is with a token I create as the logged in user