Any role that can create users can create Super Admin user

why not just add a simple role code exclusion list (e.g. [“strapi-super-admin”, “…”] to the strapi config, which is used for filtering roles on user creation (and role selection)?

1 Like