Resolved! Excluding Groups from Manage System Security Roles
I thought I knew how to solve this but it is not working as expected. We are trying to prevent a Child Group of users called "App_Administrators" from changing System Security. We want them to be able to still 'view' security roles, groups, and users...