Improved
Only the owner can assign access roles now. Access roles like "Accounting" or "Management" (under Settings → Roles) used to be assignable by anyone with staff access — including to themselves. That meant someone with a limited role could hand themselves more rights than intended. Now only the workspace owner can do this.
Nobody can change their own role anymore. Even owners can no longer edit their own access role.
Creating logins or promoting someone to manager is owner-only too. Setting up a staff member with their own login to the workspace, or promoting a temporary staff member to manager, now requires the workspace owner. Adding and editing staff without a login still works for anyone with staff access, unchanged.
Good to know
If you need one of these actions and aren't the owner, ask your workspace owner — or have them make you an owner instead. In the affected forms, options you can't use now show up locked with an explanation, instead of failing with an error only after you submit.