Allow Managers and Admin to add CPD to user's logs - without letting Users do it.

We want Managers or Sys Admins to be able to add in CPD hours when a manager does a 1-2-1 or someone does something outside the normal run of things - but the only option we can find is to allow everyone (including the user) to do this - or no one. We would like a 3rd option to allow Line Managers or higher to add CPD.