I am trying to restrict role assignment using the object S_USER_AGR. As an example i am using the following in the 'Role Name' field: T1050, T1500.
However, with my test user, they are able to assign the role "T_50043964_5100-TEST" to a user
But i cannot see how this is possible. Am I missing something here?