Permission for user to remove token from other users

[3.23 and below]
With the following roles below the user will be able to remove the token from other users.