You can create custom roles to have greater control over which privileges are offered to your users.
Requirements
You need "edit users" and "edit contacts" privileges in Jamf Account. If you do not have those privileges, contact your account representative to enable this feature. Click Resource Center in the lower-left corner of the page, and then click Contact Account Team.