Locking Down Set-Up and Maintenance

Summary:

As a part of establishing User Security, Data Security and Plant Profiles our UAA team needs access limited in Setup & Maintenance.

We've tried to create a custom role and remove privileges accordingly, but does not seem like privileges are not granular enough.

Anyone else accomplish a similar requirement?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):