users
groups
Only users with the account management permission should be able to create, update or delete users. This also restricts access to the APIs that allow listing all Groups/all Users. Fixes #3177