Hi,
. Currently, only “System manager” role profile is needed for a user to assign role profile to other users while creating them. But System Manager has lot of permissions. A HR user or HelpDesk user responsible for User Onboarding, only need to create user and assign an appropriate already created role profile. They should not be using entire “System manager” role for this simple user creation task. Any suggestion. Based on my exploration so far, it seems that ERPNext doesn’t considered various security and access control aspects. Thanks