If I create a user in the other site, there doesn’t seem to be any way to allow this user to modify anything at the network level like add a new theme.
That’s because only SubperAdmins can perform network functions.
Even when I grant the user all rights as an admin and give it super-admin status. It would fail with “Sorry, you are not allowed to access this page” if I’m incognito and if I’m logged in regularly, it goes to the main page login.
How did you grant the SuperAdmin status?
It would seem that to do network “stuff”, the user needs to be registered in the main site. True/False?
False.
These “network stuff” require the SuperAdmin capabilities, and all that’s required is to make the user a SuperAdmin. But note that:
1) SuperAdmins automatically have access to ALL sites in the network, including the main site.
2) You can promote ANY user (irrespective of their current membership) to SuperAdmin status, and you can only do this from the user’s profile editing page in Network Admin i.e. MY SITES > NETWORK ADMIN > USERS, select user, and then check “Super Admin: Grant this user super admin privileges for the Network” box. See screenshot below:
I was able to add the user from the sub site to the main site from user portal on the main site.
If you’re using a plugin to grant a custom role with a limited set of SuperAdmin-level capabilities to a user, then you’re down to the features and limits of this plugin.
As a reference, find the individual capabilities of the built-in SuperAdmin role here: https://www.ads-software.com/documentation/article/roles-and-capabilities/#super-admin
If you need further help with this, please post in the User Role Editor plugin’s dedicated support forum the plugin’s author and user community can assist you: https://www.ads-software.com/support/plugin/user-role-editor/
Good luck!