Thanks for your response @ahmaddanial
My account is correctly listed as system_admin and system_user.
But I think things are a mess with system admin role. This is what I show:
manage_system_wide_oauth sysconsole_write_site_notices sysconsole_read_integrations_bot_accounts list_users_without_team sysconsole_write_authentication_mfa edit_others_posts create_elasticsearch_post_indexing_job get_saml_metadata_from_idp sysconsole_write_site_file_sharing_and_downloads sysconsole_write_experimental_bleve sysconsole_write_user_management_permissions delete_public_channel sysconsole_read_environment_database manage_roles get_public_link list_private_teams remove_user_from_team sysconsole_read_site_file_sharing_and_downloads sysconsole_write_environment_file_storage create_emojis assign_system_admin_role sysconsole_read_integrations_integration_management sysconsole_read_authentication_mfa sysconsole_write_environment_high_availability sysconsole_read_experimental_features sysconsole_write_about_edition_and_license sysconsole_read_user_management_permissions manage_public_channel_members sysconsole_write_user_management_users add_ldap_public_cert sysconsole_read_authentication_email test_elasticsearch sysconsole_read_site_customization promote_guest sysconsole_read_site_announcement_banner manage_oauth sysconsole_write_integrations_integration_management create_team sysconsole_read_billing import_team manage_shared_channels sysconsole_write_reporting_team_statistics use_channel_mentions remove_saml_private_cert sysconsole_read_site_notices create_public_channel test_ldap sysconsole_write_billing add_saml_private_cert sysconsole_write_environment_image_proxy read_channel sysconsole_write_authentication_saml manage_jobs invalidate_caches recycle_database_connections sysconsole_read_authentication_openid sysconsole_write_site_users_and_teams sysconsole_read_site_posts sysconsole_write_authentication_email sysconsole_read_environment_rate_limiting create_post_bleve_indexes_job sysconsole_write_site_emoji remove_reaction sysconsole_write_environment_web_server sysconsole_write_authentication_guest_access sysconsole_read_compliance_compliance_export sysconsole_read_integrations_gif download_compliance_export_result sysconsole_read_environment_file_storage sysconsole_read_compliance_custom_terms_of_service convert_private_channel_to_public sysconsole_write_authentication_password sysconsole_write_site_public_links invite_user add_ldap_private_cert sysconsole_read_user_management_groups sysconsole_write_experimental_feature_flags manage_system sysconsole_write_integrations_cors sysconsole_write_compliance_compliance_monitoring sysconsole_write_compliance_custom_terms_of_service join_public_channels sysconsole_write_authentication_ldap manage_secure_connections sysconsole_read_environment_push_notification_server read_other_users_teams sysconsole_read_user_management_teams sysconsole_read_environment_developer remove_saml_idp_cert create_private_channel use_slash_commands add_saml_public_cert sysconsole_read_site_public_links edit_other_users list_team_channels manage_private_channel_properties sysconsole_write_plugins manage_bots read_data_retention_job get_analytics sysconsole_write_environment_smtp delete_others_posts read_bots read_license_information sysconsole_write_experimental_features read_audits sysconsole_read_environment_smtp sysconsole_read_about_edition_and_license join_private_teams delete_others_emojis sysconsole_read_authentication_saml purge_elasticsearch_indexes sysconsole_write_environment_elasticsearch read_others_bots sysconsole_write_user_management_teams sysconsole_write_reporting_site_statistics sysconsole_read_environment_image_proxy test_site_url reload_config sysconsole_read_reporting_server_logs manage_slash_commands read_public_channel_groups sysconsole_read_site_notifications sysconsole_write_compliance_data_retention_policy create_post_public sysconsole_write_user_management_system_roles manage_others_outgoing_webhooks sysconsole_read_user_management_channels sysconsole_read_environment_web_server manage_incoming_webhooks sysconsole_write_environment_rate_limiting get_logs sysconsole_read_site_emoji manage_channel_roles convert_public_channel_to_private manage_team_roles manage_others_incoming_webhooks create_bot sysconsole_read_experimental_feature_flags test_s3 sysconsole_read_environment_high_availability create_post sysconsole_write_authentication_signup sysconsole_read_environment_logging manage_others_bots delete_post sysconsole_write_user_management_channels sysconsole_write_environment_session_lengths sysconsole_read_site_users_and_teams manage_outgoing_webhooks create_ldap_sync_job read_jobs use_group_mentions create_user_access_token sysconsole_write_environment_push_notification_server add_user_to_team read_compliance_export_job sysconsole_write_environment_performance_monitoring sysconsole_read_environment_performance_monitoring remove_others_reactions view_team get_saml_cert_status sysconsole_write_environment_logging upload_file read_elasticsearch_post_indexing_job remove_saml_public_cert sysconsole_write_reporting_server_logs purge_bleve_indexes revoke_user_access_token sysconsole_read_authentication_signup sysconsole_read_reporting_team_statistics manage_license_information sysconsole_read_environment_elasticsearch add_reaction manage_team read_elasticsearch_post_aggregation_job sysconsole_write_authentication_openid manage_public_channel_properties remove_ldap_private_cert sysconsole_write_site_localization create_data_retention_job sysconsole_read_compliance_data_retention_policy demote_to_guest edit_brand invalidate_email_invite view_members sysconsole_read_reporting_site_statistics sysconsole_read_user_management_system_roles sysconsole_read_authentication_password create_post_ephemeral sysconsole_write_integrations_gif sysconsole_write_environment_database sysconsole_read_authentication_guest_access edit_post manage_private_channel_members read_user_access_token manage_others_slash_commands sysconsole_write_environment_developer sysconsole_read_authentication_ldap sysconsole_write_site_notifications create_elasticsearch_post_aggregation_job sysconsole_read_integrations_cors read_private_channel_groups sysconsole_write_compliance_compliance_export sysconsole_write_site_customization remove_ldap_public_cert sysconsole_write_integrations_bot_accounts delete_emojis invite_guest sysconsole_write_user_management_groups delete_private_channel sysconsole_read_environment_session_lengths sysconsole_read_compliance_compliance_monitoring create_compliance_export_job read_public_channel sysconsole_read_experimental_bleve sysconsole_read_user_management_users add_saml_idp_cert sysconsole_write_site_announcement_banner sysconsole_read_site_localization read_ldap_sync_job sysconsole_read_plugins sysconsole_write_site_posts
There is clearly tons of data here, probably duplicates? As far as sysconsole_read_environment, I do see that in a number of places:
sysconsole_read_environment_database
sysconsole_read_environment_rate_limiting
sysconsole_read_environment_file_storage
sysconsole_read_environment_push_notification_server
sysconsole_read_environment_developer
sysconsole_read_environment_smtp
sysconsole_read_environment_image_proxy
sysconsole_read_environment_web_server
sysconsole_read_environment_high_availability
sysconsole_read_environment_logging
sysconsole_read_environment_performance_monitoring
sysconsole_read_environment_elasticsearch
sysconsole_read_environment_session_lengths
As for system user role, this is what I have:
view_members create_team create_emojis delete_emojis list_public_teams join_public_teams create_direct_channel create_group_channel
Note the space just before the ‘v’ in ‘view_members’. Is that to be expected?