There are tables for user management (users, security roles, departments, teams, etc.), and a system administrator is required to make changes etc.

However, the system administrator cannot just make changes, as he or she has all permissions, including deletion and creation.

Therefore, it is very convenient to have a security role that can only perform user management tasks such as changing user settings, changing security roles, and changing departments.

So I hope to implement security roles that only allow changes to user management tasks.