Review does not take into account privileges of target resource

**Describe the bug**
In certain cases, a permission has additional checks needed which is currently not handled by the review process.

For example:
- Authentication Administrator can update authentication methods for users - except users with privileged roles
- For those users, Privileged Authentication Administrator is needed

