Either assign relevant permissions to the parent role first or remove the extra permissions from Self-Service User role and ...