It would be helpful if we had a separate role for User Operator that could edit any user account's contact details and merge user records as well as run analytics on users BUT not change or add roles attached to that account OR delete records. This is primarily to allow circulation staff more control over user accounts but to restrict access to higher-level abilities for cybersecurity reasons.