Admin role partial permissions for policy management

I have created a custom admin role named "Helpdesk" and assigned the following privileges:

• Alert – Read Only
• Device Management – Read, Create, Update, Delete
• System – Read, Update
• Users – Read, Create, Update, Delete

Requirement:

I need the Helpdesk team to have the privilege to change user policies when editing a FileCloud user account. However, they should not have the privilege to "Manage Device Configuration."

Issue:Currently, based on the above settings, the Helpdesk team has access to edit device configurations, which I want to restrict.