is it possible in NetSuite to replicate the admin role as custom, but remove certain privileges? ie I wouldn't want access to salary information