We have to add permission entity for create users and groups.
Already we have option for admin users only to create user and group in user management, group management and settings. We need a option for user to create users and group only ,not to the permission to other setting configuration.
1. We will add the new group like System Administrator group and add the permission to manage users and groups without accessing the settings configuration.We can manage the create user/group using this group .
3. We can add the permission for individual user to create/edit user and group
4. We can add permission scope to create/edit user in particular group