I am looking for what permissions are required for a tech to be able to revoke/install a profile via MobiControl, but at the same time not be able to edit the existing profile. Is this possible? 

If they need profile edit permissions to be able to revoke/install a profile, I will need to abandon this task.