(wrote this while I was tinkering so the end result is I found the issue. )
Thats what it looks like.. Logged in as Admin I can do everything.
Just updated to latest snap. This is on bare metal..
Save config permission denied by the 'User - Config: Deny Config Write' permission for user 'usernamehere@2x.xx.xxx.xxx (Local Database)'.
I have two users and they are both part of the admin group. admin and my user name.. Still occurs.
Just made a new user name and same issue.
Ok.. found it. I had selected every rule without reading them all. Second one down.. User- Config: Deny Config Write
Seems backwards compared to the rest of the "allow rules" and does not affect the "admin" account as it does the others..