We created two global roles in our multisite—Approver and Requester—and they work on subsites, but when we update those roles at the Network level, the changes don’t sync. For example, if we remove capabilities from a global role, the Network Admin view updates correctly, but the subsites still show the old permissions.
Even after clicking Update and Update Network, the subsites don’t receive the updated role settings. This leaves the subsites out of sync and users may keep permissions they shouldn’t have. We need help understanding why the updates aren’t propagating and how to fix it.