Enable access to the 'Session Management' option only
We have a lower admin access we're trying to setup which would allow the "Junior Admin" to change user roles (aside from those which are restricted). Part of this admin functionality is to be able to control 'Session Management' in the event a user's session is locked up and they need to kill it. From my testing we need to select the Configuration->Configuration checkbox. This then allows access to a few other items, such as 'Content Settings', which gives access to Builder Settings-Unique Report Names on/warning/off. Also the Configuration->Outgoing Mail Server.