A Service that would allow the access to Profile, Roles through API endpoints. These can then be viewed, created, edited and deleted. Then other tools like applying Profiles or Roles to users.
A service that can be used to view, edit or delete Users through an API endpoint. This would expose the Admin -> Users data in Cascade through an API. The User record can contain an employee Id to link to the Employee endpoint.