What action can users NOT perform in the Delegated Administrators group?

In a Delegated Administrators group, users are granted specific administrative privileges to manage certain aspects of the Salesforce organization, primarily concerning user management. However, they do not have the ability to create profiles. This limitation is in place to maintain control over the security and configuration of profiles, which define user permissions, access levels, and system settings.

Profiles are a foundational component of Salesforce's security model, regulating what users can see and do within the system. Allowing delegated administrators to create new profiles could lead to inconsistencies and potential security risks. Therefore, while delegated administrators can create new users and edit existing ones, as well as provide support such as password resets, they cannot create profiles, which helps ensure that profile management remains restricted to higher-level administrators with broader oversight of the organization's configuration.