Example: User with Complete Control on One Profile

To configure a user that has complete access to just one specific profile (but no other profiles, nor the rest of administration such as creating accounts etc.), set up the lockdown settings above, then:

1. Create a Profile ACE on the specific profile, for that user, read and write access, and type Allow.

2. Create a Setting ACE for All Settings, for that user, read, write and delete access, type Allow.

The user will now be able to modify any setting on that profile, as well as start/stop walks on it, but will not be able to edit other profiles.