I'm looking for a user class that allows me to grant users all-access to our cloud instances (JIRA+Confluence, etc) with the specific exceptions of (1) they cannot remove other admins and (2) they cannot make any changes that would impact billing^.
^ For example, they cannot change the billing card. Another example: they can create more users but they would be blocked if creating +1 user would increment our billing tier.