When running bootstrap on a Symantec Advanced Threat Protection( SATP) or Symantec Endpoint Detection and Response (SEDR) appliance, there is no option to change the appliance's role.

After setting the role during the original bootstrap, it cannot be changed. This is by design.

To change the role for a physical appliance, you must re-image the appliance thrugh the OSrestore process documented here: https://support.symantec.com/en_US/article.HOWTO111549.html

To change the role for a virtual appliance, you must deploy the OVF again. See the Administration Guide for the version you need to redploy for further instructions.