In role management, it is possible to restrict which roles a user with a certain role can assign to other users.
1. Open role management from the system admin section
→ "Settings"
→ "Roles"
→ "Role Management"
From the list, select the role whose ability to assign roles to others you want to restrict.
2. Locate the "role management" row in the role permissions management table and set the permission to "restricted" in the "edit" column.
After this, a "grantable roles" tab will appear for the selected role.
3. Navigate to the "Assigned Roles" tab and click "yes" for those roles that are allowed to grant the system to other users.