Validator supports ROLE TO USER when assigning and removing roles.
It does not support ROLE TO GROUP and ROLE TO ROLE (And probably not ROLE TO CONTAINER, but I don't care about that)
Since we use role to group and role to role a lot, it would be tremendously useful to get support for that.