How to allow a role to edit/manage user accounts e.g. click Edit and change email, username, password etc., but do not edit the fields itself, e.g. cannot just go to
Manage fields and delete/create/edit fields?
Field permission doesn't do that, it's specifically just for each field per field.