1st, look if you can revoke from a role unneeded capabilities. Capabilities started from ‘ure_’ protect access to User Role Editor. Revoke them from ‘administrator’ role and single site admin will not see Users->User Role Editor (ure_edit_roles) and Settings->User Role Editor (manage_network_plugins).
2nd, use URE Pro Admin menu access as the 2nd level of configuration, admin menu access, when you can not revoke some capability, which is in use by different menu items at the same time, like manage_options or edit_posts.
