Admin-like account that can't assign the can_delete role


I'm looking to create an admin-like account which basically has ALL the privileges the admin account has, except it can't assign the can_delete role. Is such a thing even possible? Thanks.

0 Karma


My first comment I deleted because I didn't read the question properly. Here we go again.

The ability to assign roles (edit-roles) doesn't stop short of assigning the can-delete role. If you get the role to assign roles, you get to assign can-delete.

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!