A user who has been assigned the User - Configure Regional User Access right (formerly User - Setup User Accounts) can work with any user account in your region. This includes specifying users' general access, roles, resource access, and notification preferences. For this reason, this right is generally reserved for the region-level administrator.
Regions can enable the Delegated User Management feature.
If enabled for your region, the User - Configure Regional User Access right also allows the region administrator to specify resource-level administrators. These individuals can manage users for their resource. The region administrator decides which roles each resource administrator can assign to the users they manage.
By default, this feature is disabled.
For details on administrative roles, refer to About Roles and About Resource Administrators.