Allowed CMs to change a user's role to any level except admin