In essence, I prefer not to alter the permissions on out-of-the-box roles, such as Administrator. Yet, I'm not seeing any possible course of action that would allow me to be able to keep the few administrative employees up-to-date from our HRIS system unless I do this.