Can access rights be assigned to groups of users by a member of a defined administrator group?
The system will give full user management functionality to administrators so that they can create/edit/delete groups and roles and assign users to those groups.
