Happy to help! The "Allow modifying account settings" is a very powerful one, as explained by Apple: "Users can’t create new accounts or change their username, password, or other settings associated with their account." https://support.apple.com/en-gb/guide/mdm/mdm54960f92a/web
... View more