Grants permissions for all actions in Configuration Manager except for the permissions that are required to manage security, ...

Grants permissions for all actions in Configuration Manager except for the permissions that are required to manage security, which includes managing administrative users, security roles, and security scopes.