How do you give users access to create groups, add users, and manage?
I think what you're looking for is Rule based Authorization You could define a role as an Admin and give him most of the access.. Others a little less and so on based on the tasks that you want them to limit to. It's basically upto logic and need! :)