ex: A subadmin who was given "TA" access shouldn't be able to assign someone "Instructor" access. They should only be able to assign "TA" and "Student" access to other users.
Sakai Property: delegatedaccess.subadmin.realmrole
Create a list of "realm:role;realm:role;" from highest to lowest level of access.
For instance, if you wanted to order the importance of roles
of sakai's default permissions, it would look like:
This will only allow subadmin to assign permissions at their level and below.
Any realm/role that isn't in that list will be considered the last level on the bottom.