Which privilege allows 'managing adminstrator profile values'

Summary:

We need to know the privilege that allows managing adminstrator profile values as we need to remove this from certain roles. We have tried thinking this was the 'Manage Application Profile Option' but this does not render any result. Please advise

Content (required):

We need to create a custom role which allows administrators to perform all tasks apart from accessing 'manage administrator profile values' in setup &maintenance

Version (include the version you are using, if applicable):

23A

Code Snippet (add any code snippets that support your topic, if applicable):