Let HR roles link employees to any user except admins

HR User and HR Manager can no longer link, unlink or change admin accounts through an Employee. Only a System Manager can touch those users.