Log in with user who HAS BcmsEditContent and HAS NO BcmsAdministration roles assigned. Create new page/file or open properties for any already existing -> choose to add some user/role in Access section -> start typing text matching some existing role/user name: no suggestions will be provided
As editContent user is allowed to change access rules for defaulted roles, he should be allowed to add new one too.