$ 0 0 Then the only likely remaining permission is the SAM Admin role pictured below under "Server & Application Monitor Settings" editable under each users account settings.