Need an ability to customize IT Security Manager Role for only giving access to edit user account (n

Summary

Need an ability to customize IT Security Manager Role for only giving access to edit user account (not updating roles) for users

Content

Hi Team,

There is a business requirement which requires IT Security Manager job role to be modified in such a way that it only gives access to edit user account which includes reset password, unlocking user account. It should exclude the access to add/edit roles for users. Currently, if we add two privileges i.e. Edit User Account and Reset Password and create a custom role, it allows user to modify user account along with the roles.