I have a user in a multi-site environment that is administrator on the main site (not super-administrator).
He is unable to see the link to user-role-editor. Opening the plug-in link directly gives the error that it is not allowed.
Looking in the settings page on network level, all 4 options are checked.
What am I doing wrong to give a site admin the possibility to edit the roles?