What are all the roles that provide access to admins so that they can provision new roles to user

Summary:

We have a Audit question from our Internal Audit Team:

What are all the roles that provide access to admins so that they can provision new roles or modify roles to User Account in Security Console.

Content (required):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):