Password or user creation permissions!

Hi all.

Can anyone advise as how to allow a user permissions to change settings, but deny his/her permissions to create user accounts and/or change user passwords.

Thx.

OK found the answer, just assign that user to the “write” group.