If a global course teacher is created, and given the rights to create new users, he will be able to see and modify the profiles of those above him in the hierarchy (course creators, admins). that is not quite fair. A table like the one for overriding roles would be nice. It would also be much simpler, a sqare table containing the global assigned roles who can delete users. in standard, that would be a 3x3 sqare, (admin, course creator, teacher). this way, a global course creator will not have acces to the account of the admin, to modify the data or delete it. it would be even better if a teacher would not be able to see roles above him in a browse user list (for assigning to a course or modifying), because they can do it already. there is no need for a teacher to assign an admin as a student. any feedback greatly apreciated