The SYS_AUTH_USER_ADMIN_ROLE role is granted the MANAGE ANY LOGIN POLICY and MANAGE ANY USER system privileges with the WITH NO ADMIN OPTION clause.