I just setup a new NiFi instance and setup myself as the Initial Admin Identity, I'm currently the only user on the box and I've made no security changes. I noticed today that I couldn't query provenance.
I had to go in and create a new policy and add myself to it. This seems odd for an initial admin identity, but maybe it's by design? Thanks, Peter