remove set global and assign roles from global
Ticket
remove set global and assign roles from global+status
remove set global and assign roles from global+priority
remove set global and assign roles from global+tag
remove set global and assign roles from global+commit
remove set global and assign roles from global+issues
We already advise people in permissions to not give those two powers to any role.