(From JeLuF)
Adding groups should be possible. You basically need:
- Group name
- Group permissions (checkbox list)
- Who may add users to this group (checkbox list of existing groups)
- Who may remove users from this group (checkbox list of existing groups)
This should be something bureaucrats should be able to handle.