The Privileged Role Admin role can grant any other admin role to another principal at the tenant level.