I'm not lucky I have disabled all inherited roles for admin admin and when I try to re-enable back the save button is disabled and all the cluster is affected by this change please help
Hi
have you remove also this edit_roles_grantable? If yes there are some discussions about it like https://community.splunk.com/t5/Security/Admin-can-t-see-users-with-a-certain-role-and-we-can-t-take... You could found some other too.
r. Ismo
@Abimamana - If you have done it in production, contact "Splunk Support", as this type question actually require to login to system and troubleshoot.
