Give access without allowing administrator management

For GiveCampus accounts and administrator access.

The fundraising Manage Administrators permission is supplied by Superadmin and Fundraising Superadmin in the role catalog. It includes creating/editing/deleting admins and changing roles, individual campaign/form access and group access. Use task-specific roles and needed object access when staff should not manage colleagues. Review all assigned roles because permissions combine; adding a narrower role does not cancel a broad one.