Any role that can create users can create Super Admin user

[commentsBot]

A recommendation if you are using internal APIs is to make sure you use exact semver versions in your package.json to avoid getting automated patches that might break your extensions of internal code