We do not want a sub profile to have access to Set Up.

We do not want a sub profile to have access to Set Up.

We do not want any profile to have access to Set Up, so that the user with that profile is not able to change the settings, like:
- Not able to change the logo / theme / organisational details, etc.

HOW TO DO THAT....?