Tiered authority for Admin functions

SS will need to support different tiers of Admins: System, Master, Operator, User with panels to support this
What functions does each tier need to perform?
Master Administrator -can assign administrative authority to other users.
This authority is usually given to the head security officer.

System Administrator -can define and maintain system options and
application definitions. This authority is usually assigned to a
to a technical services or systems programming group.

Operator Administrator -can define and maintain operator command
class tables. These tables control what operator commands
operators can use.

User Administrator -can define and maintain user IDs and options. Each user
administrator is responsible for one or more user groups (which must be
specified). User administrators can only modify users
belonging to a specified group.

Brokerage Data Security Admins will be manually adding, updating, and deleting IDs, so they would need to be User Admins.
The leads for their team would need to manage and maintain authority to other Brokerage Data Security Admins, so the leads would need to be the Master Admins.
Those installing and updating system options, application definitions, etc would need to be the System Admins and Operator Admins.
We don’t want Brokerage Data Security Admins to administer other user groups beyond Brokerage. We don’t want them to have any system or operator admin authority.