I have this function which prevents my three custom roles (used for multisite admins) to create users with other roles t