Our customers have a need where we create some temporary groups on the fly and would like the ability to allow a permission to allow group creation without giving them system administration where the user has access to configuration and operational aspects of the system. Same functionality as for user maintenance but for groups.