Read access to the profile and read access to the desired setting(s)
are needed to view the given setting. Write access to both is needed
to modify a setting. Delete access to the profile is needed to delete
the profile. Write access to All Profiles (the parent of
profiles) is needed to create a new profile.