How can I restrict a user to do only the following activities?
- User maintenance - Create Users, Deactivate Users, Change Permissions, Change Role in hierarchy, Update Name, Federation Id, and other user attributes
- Add Help Text
- Create Fields, modify field attributes, remove from page layouts, modify page layouts, update pick-lists
- Create email template, update email template
The user should not have the ability to view/modify all data.