Yes - that. Create a staff role and add individuals to it that require additional features. 'Allow' will always override 'unset'. It won't override 'prevent' but you have no need to set anything to prevent that I can see. Removing the required 'allows' from the authenticated user role will have the result you need.
Roles and permissions
Disabling all the optional preferences
This discussion has been locked so you can no longer reply to it.