We greatly need the ability to have a user account with Admin like permissions for only specified groups and restrictions for changing anything else like Configuration Profiles, automations, etc. that are global. The user could clone or create new profiles etc. and modify them but nothing else. 

Thank you,

Jeff Daniels