As a first step, I added the KarlUserAdmin group, but we also need to run a new script, reapply_profile_security, to allow KarlUserAdmins to edit existing profiles.
As a first step, I added the KarlUserAdmin group, but we also need to run a new script, reapply_ profile_ security, to allow KarlUserAdmins to edit existing profiles.