I have a use case from a bigger enterprise, they are currently adopting AWS SSO with AzureAD integration. In the setup, currently account users or roles are able to create permission sets with administrator access without adding a Permission boundary. Is there any way to restrict creating the permission sets without adding a Permission boundary
