I've found out how easy is it to restrict an admin group to certain settings. For this particular issue I have (I get a lot of password reset requests because for some reasons our users keep forgetting their psswords) I want to enable a teamleader to reset staff passwords. I have given him a seperate staff team which has Admin rights. The rights have been limited to only view and update Staff members.
The problem is, he can give himself and others full admin rights by changing the team group...
Advanced Admin restrictions for staff editing
The problem is, he can give himself and others full admin rights by changing the team group...
Advanced Admin restrictions for staff editing