Hello,
Could you tell me what is priority? capabilities explicitly enabled/disabled or from inherited roles?
I had to manually edit etc/system/local/authorize.conf (clustered environment) on edit_correlationsearches = enabled (was disabled) even if it had ess_admin, ess_analyst and power inherited.
Thanks for your help.
* If this helps, please upvote or accept solution if it solved *
