is it possible to grant "Core Administration Permissions" to a custom role, then remove all unneeded permissions from it, so, for example, it will only have "Core Administration Permissions" to users data (and not accounting, for example)?