Allow for Impersonation but NOT allow to edit profile

In a highly regulated industry, our site users can not change their profile information as it must match licensing so to control that we need to lock down their permissions to change their profile (all info is sent through an API )  BUT the challenge is that in our industry assistants, marketing reps, etc. need to ability to order on behalf or impersonate.  Within your platform both edit profile and impersonate have to be toggled at the same time. I would like you to consider it be exclusive.  Let the impersonate users not require the edit profile feature