Capabilities assigned to a user via role(s) may be revoked from a user via role(s) only. That’s why such checkboxes are shown in grey color, disabled.
You can create another role and grant it to a user instead of previous one. You can just revoke role from a user and grant him needed capabilities directly after that.
