Removing roles should be Admin only too.