Don't give the setup permission Role?

I'm not seeing a permission that looks like that. We are trying to create a Core Admin role - almost same as an admin but can't edit roles (Bulk Manage Roles permission) and also can't assign roles to themselves or others on the emp record. We want this role to maintain the ability to check/uncheck the Access checkbox to move NS access between members of the team when needed, so we still need to be able to edit the employee record.

I'm sorry to say it - but you have competing requirements there. Unchecking the access box removes all roles from the user.

No need to be sorry Kevin it was worth a shot. I appreciate you taking the time respond.

You might be able to use the "inactive" checkbox instead as an alternative - it will reduce your user count, and remove access, however they also become unselectable when marked inactive on other forms.

Noted. I will look into that!