[Bug]: CreatePrivilegeGroup permission denied after revoking the privilege but there is still ClusterAdmin granted

[Bug]: CreatePrivilegeGroup permission denied after revoking the privilege but there is still ClusterAdmin granted #3516