All permission boxes for administrators are disabled "greyed out". enter image description here

I can do it via drush but not through the UI.

1 Answer 1


That's because administrator is an admin role, that means it has all the permissions all the time. Editing it via drush won't do anything.

If you want a role not have all permissions it must not be an admin role, but that means you need to manually add new permissions.

  • But in my use case the permission is "can login via QR code" which I NOT want for administrator roles...
    – koosvdkolk
    Feb 5 at 15:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.