This hopefully is a very quick question what level of Technician do you need to be in order to un-enrol a user. At the moment I have assigned 1st line support Operator access rights but this does not seem to give them the ability to un-enrol users where as if I make them Super Admins then they can. However I don't really want 1st line support to then have access to say the configuration which they could change by mistake.

Thanks