Roles tab is redundant for users who can administer users

Attached patch adds the following changes:
- Adds test coverage for access to the user/%user/roles routing for users with the 'administer users' permission
- Syncs access to the 'Roles' entity operation and the 'Roles' role delegation edit form

Attached patch applies the correct permission check to the RoleAssignTest

Committed and pushed to 8.x-1.x. Thanks!

Automatically closed - issue fixed for 2 weeks with no activity.

Opened ✨ Allow users with administer users to see Roles tab via a setting Active as this caused a regression for us.

Another +1 to above.

We use this form as the primary way to assign roles in some scenarios.

For example the People page and user list may be disabled, especially in SSO configurations.