We are running 10.7.1 federated Server and Portal. It's my understanding that by default, only the person who publishes data to ArcGIS Server and the server Administrator can view/modify/delete a particular services. What we're trying to accomplish is a system where anyone who is assigned to the Publisher (or custom?) role in Portal can view and modify all services within Server Manager. I set up a custom role in Portal that has View, Edit, Manage, Create privileges and a few Admin privileges

Great, now anyone assigned to that role can see all the Services in Server Manger. But they now have access to edit the Server security settings, such as editing the PSA account. Is there a way to give certain users access to view/edit Services within Server Manager without giving them the ability to edit Server Manager security settings?