Thanks @Naybour!
...and if you're logged in as the admin user, don't assign "ess_admin" to the user because you'll get an error saying it is not grantable. Instead add "ess_admin" to the "admin" role. See https://answers.splunk.com/answers/671058/i-cant-assign-can-delete-to-default-user-admin.html
(can't seem to get links in comments to work - sorry!)
... View more