Why don't Security Administrators need to be Assigned Roles?

Security administrators are automatically given access to all dimension attributes and measures. That allows them to set up roles and control access for users with other levels of access in the application.