Custom Role for Unlocking User accounts

Summary

Attempting to create a Custom Role that with allow those assigned to only Unlock user accounts

Content

Hello All,

We are attempting to create a Custom role that will allow members of our Service Desk/Help Desk the ability to Unlock user accounts. We have been able to create a custom role that allows this action but it also allows adding/deleting roles for users or themselves (Privilege: Edit User Account). Something like this could create a security issue with users assigned the custom role, they could potentially assign themselves or another user an HR role or a more powerful role.