Many of our partners have set up AE user accounts for their clients, allowing their administrators to approve their own requests. Typically, these users are assigned the "Technician (Level 1)" or "Technician (Level 2)" role to prevent them from modifying their permissions or accessing other user accounts.

We've created a comprehensive document that outlines the permissions associated with each role and provides guidance on restricting Company Access. You can access this document here.

However, there is a limitation with the current setup. Level 2 Technicians cannot create Advanced Rules (e.g., publisher or file attributes). 

If you do want them to have the capability to make Advanced Rules, the "Downstream Admin" role offers the same permissions as Tech Level 3, except these users cannot view your global settings or manage other users. Here are the permissions associated with this role:

• Requests: View/Edit
   
• Rules: View/Add/Edit/Delete
   
• Advanced Rules: Add/Edit
   
• Computers: View/Edit/Delete
   
• Companies: View/Add/Edit/Delete
   
• Locations: View/Add/Edit/Delete
   
• Events: View
   

This setup provides flexibility, allowing you to tailor permissions based on your specific requirements.