I have two roles, editor and employee. "A" user is in editor role and can change permissions, for example he can add users to employee role or remove them. However, it would be good that users in editor role can change permissions but only ones that they have.
Use case: "A" user in editor role can add member into editor role but cannot remove any members from administrator role because "A" user is not in that role.
How can I reach this above?