Any role that can create users can create Super Admin user

I agree strongly with this. For our service, we want the main/primary editor to be able to invite other Authors and Editors - but they can also invite Super Admins, which is definitely not desirable for us.

Has anyone found a workaround for this? If not, we might do some investigating on how to completely block/prevent new super-admins from being invited or otherwise created. It won’t be pretty, but it’s essential for our use-case of Strapi.

1 Like