In a geo-distributed active/backup cluster scenario when all voting members are lost you must execute the RPC 'restconf/operations/cluster-admin:change-member-voting-states-for-all-shards' to convert the non-voting nodes to voting. This request needs to execute even when there is no leader. In Carbon this results in NoShardLeaderException due to dynamicAuthorization.