Is there a way to further restrict a delegated admin's access? For example, still allowing them to log in as a user but removing their ability to do things such as change a user’s profile, unfreeze a user, or updated a list view.
I've done a quick test and I'm not sure this is possible. While the login feature requires very different permissions to the ones that allow you to freeze a profile, they are interlinked and both considered elevated admin rights.
