ERS Admin and ERS Operator has same permissions (Super Admin Data Acc)

[Saravana17]

Hi All,

I'm curious to know that how ERS Admin and ERS Operator policy differs on ISE. I know that we can't do changes through ERS Operator role. But, I wonder how this is possible as while I checked the RBAC policy on both roles which are selected with "Super Admin Data Access". 

Has anyone knows how this is being differentiated?

Thanks in advance for your best responses.

Thanks,
Saravana

[Arne Bier]

That's a great observation. I don't see any "Menu Access" which I hope means that you have NO menus (not required for ERS). But you're right - the operator should have read-only access and not read-write data. I think you may have discovered (another) bug.