Create separate toggles for roles and users in permissions access

There is no way to differentiate roles vs users for permissions access, it all falls under user management. If a franchise needs to restrict franchisees from changing role permissions, but wants them to be able to add their own employees there is no way to do this. There is a similar restriction on the menu configuration permissions in the back office. It should look like this but separate roles and users.