Need to modify Privileges to IT IT Auditor role

Can you help identify which Privileges have access to modify Profile Options and REST API. We want tocustomize this Role.

IT Author Role Access
This role gives access to other Privileges in addition to

Managing Application Profile values..
Allows management of all application profile option settings and values at various levels to control application behavior. and also the role
Use REST Service for Advanced Access Control Role Analysis
which gives access to below. I have highlighted some privileges and access below in red that maybe of concern.

Advanced Access Controls Analyst
Access Control Manager

Access Control Manager Viewer

Access Incident Results Manager