Is it possible to restrict the IT-security manager to only be able to give roles to other users?

Content (required):

Hi all,

Is it possible to restrict the IT security manager to only being able to give roles to other users and not him/herself?

We have a requirement from a customer saying that they need to restrict their users with IT Security Manager role from being able to add new roles to themselves. Hence, IT Security Managers are only able to add roles to other users than themselves.

Keep in mind that the customer is also planning to use Risk Management if there is a feature in here that can help.

Hope you guys can help!

Best regards,