presto-hive/src/main/java/io/prestosql/plugin/hive/security/SqlStandardAccessControl.java/SqlStandardAccessControl/checkCanCreateRole
class SqlStandardAccessControl:    @Override
    public void checkCanCreateRole(ConnectorSecurityContext context, String role, Optional<PrestoPrincipal> grantor)
    {
        // currently specifying grantor is supported by metastore, but it is not supported by Hive itself
        if (grantor.isPresent()) {
            throw new AccessDeniedException("Hive Connector does not support WITH ADMIN statement");
        }
        if (!isAdmin(context)) {
            denyCreateRole(role);
        }
    }