|To...||the user must have...|
|create a role or external role||the CREATE ROLE privilege (system level).|
|drop a role or external role||one of the following privileges:
|grant privileges to a role, or grant role membership||The role granted WITH ADMIN OPTION.
The creator of a role is automatically granted the specified role WITH ADMIN OPTION.