Create a role User administrator

Actual behaviour

Nextcloud knows 2 admin groups:

Super Administrators and Group Administrators

As of https://docs.nextcloud.com/server/12/admin_manual/configuration_user/user_configuration.html#granting-administrator-privileges-to-a-user

• Group Administrators can only act in their group, but they cannot create a group or assign a group admin
• Super Administrators have full privileges

Expected behaviour

• In many cases I want a User administrator: This role has full access to all user settings, but cannot assign the admin role to a user and has no access to the admin settings.
• Use case: We want grant some users the ability of all privileges of managing users but we donnot grant them access to the admin settings. They can create groups, assign group admins and delete any user but those of the admin role.

I think this a very common scenario.

Start by reading the linked administrator-privileges documentation and tracing how Super Administrators and Group Administrators are currently handled. Done means a distinct User administrator role can manage users, create groups, assign group administrators, and delete non-admin users without assigning admin roles or accessing admin settings.