The first step is to name it (1). Then, in the Common window you’ll need to grant full access only to:
Access Level, Advanced Operator Commands, Cardholder Batch Adding, Cardholder Custom Fields Setup, Cardholder, Cardholder Import, Cardholder Export, Cardholder Search, Historical Log, Holidays, Operator Control, and Time Periods of the Millenium access controls (2, 3, 4):