There is a super role, which grants a user all the privileges that are possible to grant:

tarantool> box.schema.role.info('super')
---
- - - read,write,execute,session,usage,create,drop,alter,reference,trigger,insert,update,delete
    - universe
    -
...

(reference, trigger, insert , update, delete are no-op.)

However, a user with the super role is not allowed to do some actions that admin can do. For example, it can't grant or revoke permissions for an object that it doesn't own or for a class of objects (so called entities):

There are other direct == ADMIN checks in alter.cc. We need to look over them and find other admin-only actions if there are ones.

I propose to fill the gap between the super role and the admin user: add the needed individual privileges and attach them to the super role.