diff --git a/admin/roles/assign.php b/admin/roles/assign.php
index be36067ec33..95d2776eaf9 100755
--- a/admin/roles/assign.php
+++ b/admin/roles/assign.php
@@ -161,7 +161,7 @@
             $topleveladmin = false;
    
             // we only worry about this if the role has doanything capability at site level
-            if ($adminroles = get_roles_with_capability('moodle/site:doanything', CAP_ALLOW, $sitecontext)) {
+            if ($context->id == $sitecontext->id && $adminroles = get_roles_with_capability('moodle/site:doanything', CAP_ALLOW, $sitecontext)) {
                 foreach ($adminroles as $adminrole) {
                     if ($adminrole->id == $roleid) {
                         $topleveladmin = true;