Check the roles a userrole can edit from the security dialog opened via the project explorer, under project.
You’ll find that the user with a role other than the administrator role is not allowed to manage any or a limited amount of roles.
For more information see; https://docs.mendix.com/refguide/user-roles
Only the Administrator can edit System.User attributes.