Hello, I am interested in the question - Is it possible to have any role (same permission as admin have) but this person must not have access to certain projects and must not impact these projects (change any schema, workflow, permission e.t.c). But this person should have access to create new company-managed type projects and have in this project admins rules.
I found one decision - grant trusted admin role to the person and change all default schemas (permission, workflow, screens) in existing projects - for purposes that this person can not change these schemas inside the projects in which they has access and impact existing ones in which do not has access. But it will take a lot of time and looks like a monkey job especially if there are about one hundred projects.
Is there any best practice in such access rules?