These roles have maximum privileges in their area, i.e. super user can do everything and auditor can stop changes to the server being logged.

The administrator role should be prevented from modifying these two roles.