Are you trying to control who has access to make changes to user profiles ?
Typically, Qsecadm and Qsecofr are members of the *Secadm and *Secofr User Class which have the ability to create and change user profiles, but this authority can be given to any profile as desired.
I find the Redbooks most helpful, ie; Tips & Tools for Securing Your iSeries-SC41-5300-07. There are numerous others.
Hope this helps,