Just a small suggestion.

If you assign someone as a user manager he can add priviledges like network access to someone eventhough he doesn't have those priviledges himself.

Would be nice if a user manager cannot give more permissions to other users than he has got himself (extra checkbox somewhere to enforce that?).