A set of CEM permissions configurable via EEM that segregates duties between security, system and configuration administrators. Yellow are changes to OOTB settings and red is what has been removed/deactivated.