diff --git a/admin/roles/assign.php b/admin/roles/assign.php
index 6fb36db2e73..24d3a383405 100755
--- a/admin/roles/assign.php
+++ b/admin/roles/assign.php
@@ -165,7 +165,7 @@
             $topleveladmin = false;
    
             // we only worry about this if the role has doanything capability at site level
-            if ($adminroles = get_roles_with_capability('moodle/site:doanything', CAP_ALLOW, $sitecontext)) {
+            if ($context->id == $sitecontext->id && $adminroles = get_roles_with_capability('moodle/site:doanything', CAP_ALLOW, $sitecontext)) {
                 foreach ($adminroles as $adminrole) {
                     if ($adminrole->id == $roleid) {
                         $topleveladmin = true;