Restrict DROP USER/ROLE from non-dbo user

Restrict DROP USER/ROLE from non-dbo user #15237