When editing app properties in my Splunk SHC as an admin, why am I getting a "You do not have permissions to edit this configuration." banner?

[tnerpel_splunk]

(creating this to answer)

Details:

Search Head Cluster (SHC)
v6.5.2
Logged in as admin

When going to manage apps and then clicking Edit properties the edit page opens, but has a red "You do not have permissions to edit this configuration." banner at the top of the page. There is no save button, only a cancel option.

[jmclean]

So why would the "Edit properties" link be there at all? If it was simply a method of viewing the properties it should be renamed to "View properties".

[tnerpel_splunk · Accepted solution]

This is expected behavior in a SHC environment. If you need to edit any properties, you should do it at the Deployer level and then push the shcluster-bundle down to the members. This is to keep apps from behaving differently or having different settings and properties inside of the SHC.

[jmclean]

So then that link should be renamed from "Edit properties" to "View properties".

[AnilPujar]

how to disable default search app?

do i need to push search app also from deployer? after editing app.conf?