Allow Regular (HR) User to Create Users for Own Teams and Assign Only Their Own Roles

[assr91]

Hi community 👋

I'm trying to configure EspoCRM (v9.0.5) so that a user with type = regular can:

1. Create new users (limited to their own team)
2. Assign roles — but only the roles that are already assigned to them (not see or assign all roles)

But I'm still facing issues like:

• "Access denied" when trying to save a new user
• Password field not showing in the create form
• Roles dropdown access denied

Can anyone guide me on:

• How to fully enable this behavior?
• How to limit team access & role assignment as described?

If custom code is needed, I'm open to adding it.

Thanks in advance 🙏