Add account permission

I selected the administrator as the only role with the add accounts permission. However, all roles are still able to add a non-authenticated names.