Repository Role - insufficient privilege on GRANT_ACTIVATED_ROLE object

I was trying to create a repository role. As I understand things, it should be possible for me to assign privileges to a repository role without my having to have the privileges first.

I tried to assign the role  'sap.hana.xs.ide.roles::Developer' (required for web IDE) to the repository role that I had just created.

I got this error message:

• (Security Editor) Changing 'MARCHAMB.Repository_Roles::Web_Dev_Workbench' role failed:
  404 - Could not grant privilege 'sap.hana.xs.ide.roles::Developer' role since you insufficient privilege on 'GRANT_ACTIVATED_ROLE' object

I configured an authorization trace but I didn't find any entries in that trace.

• Do I simply need more privileges? Which ones?
• Are there certain roles that cannot be assigned to other roles? Which ones?

• Could I assign the IDE developer role to a repository role if I used _SYS_REPO or perhaps another system user?

Any help will be appreciated.

Cheers,

Martin