The specific xpath:
[System.UserRoles = '[%CurrentUser%]' or System.grantableRoles[reversed()]/System.UserRole/System.UserRoles = '[%CurrentUser%]']
means a user can access the UserRole object if
This is related to the User Management Properties in the User role config.
An option to allow users with a certain role , to manage users with a specific rol(set)