We have setup a site in Drupal 7 on which we would like certain users to have access to the user management page, and be able to create new users, assign roles, etc., but we don't want to give them access to the Roles and Permission pages.
Currently Drupal only has 2 permissions
Administer Permissions and
Administer users permission, the user has access to the User Management page, and can create new users but cannot assign roles to users.
If the user has the
Administer permissions permission, he can assign roles to users and also access to the permission and role management pages.
How would you grant a user the right to assign roles to users, but prevent him from accessing the permission page?