Permissions mismatch between Content Editor & Content Administrator roles

Problem/Motivation

As per documentation here and here, Content Administrator should be more privileged user role then Content Editor, but what we noticed at the moment is that Content Editors have the permission to 'administer menu' when Content Administrator don't.

Proposed resolution

1. Review permissions list on both roles
2. Remove permissions provided by not bundled modules, like 'Use PHP input for field settings (dangerous - grant with care)' & 'use PHP for label patterns'
3. Add administrative permissions to Content Administrator, like 'administer menu', 'access toolbar' & 'access administration pages'
4. Remove administrative permissions from Content Editor
5. Remove unrelated to content editing permissions from both roles, like 'access user profiles' - this might be intended but then both roles should have it
6. Update documentation page https://www.sector.nz/documentation/preconfigured-user-roles-user-profil... to point https://www.drupal.org/docs/user_guide/en/user-concept.html instead of outdated https://www.drupal.org/docs/7/understanding-drupal/users-permissions-and...

Remaining tasks

1. Confirm/update proposed approach
2. Create a task list based on the outcome of the above