I would like to give the Helpdesk the rights to the Restrictions tab and be able to change the password for users and un-check Intruder lock outs. They are already using NWAdmin for this. Are the rights that I already have set up in NWADmin the same if they use Console One? I am implementing Universal Password and since they can't change passwords for UP in NWadmin I would like to them to use Console One. I know Imanager will work but how do I set up that role for them? I heard you have to be careful when creating roles because you can lock out your admin users on accident.

Thanks in advance.