From Business Automation PAM Field Enablement Session:

For case authorization 'MODIFY_ROLE_ASSIGNMENT' should default to 'owner,admin'. Otherwise, any user of the case can change roles and do anything on the case.