I have cloned the sys admin profile and created a profile named IT admin having same privilege.
My Problem: I have a custom setting record which stores a sensitive information(password) in it. I do not want the IT admin users to go access the custom setting but should be able to do other admin related activities( they should have access to setup menu etc)
How can I restrict this IT admin user to not access custom setting data? Is there a way to hide it?