Showing Client Roles to users with reduced rights

Hello,

I’d like to have users in Keycloak who can manage other users and there groups and roles. Unfortunately the assignment of manage-users view-users query-users query-groups shows only the main topic Groups and Users but no roles at the client role selection.

If I add query-clients the user gots to much access to all the client settings.
Whats wrong ? How can I allow the user to assign roles without complete access to client settings?

Thanks in advance - Sascha