Restrict ARC prod instance source system connection update and increase scope of Power user

We want to restrict noone in ARC prod instance can update source system connection in data management

As of now user is working as service admin. When we tested power user capability with additional roles certain activities power user can't perform which is required to be performed by client with power user role:

Testing results based with additional roles:

S.No	Activities	Power user testing result
1	Period Create	Ok-Working for power user with additional role
2	Period status change	Ok-Working for power user with additional role
3	Filter and View creation	Ok-Working for power user with additional role
4	Filter and View publish