Currently, the user manager role can read or assign users to any role. This means that the user managers can create their own superuser accounts

User manager issue when assigning users