We need to be able to allow certain admins to only activate or deactivate users, but not be able to edit or delete users... this is currently not possible because in order to activate or deactivate a user, the admin has to have 'modify' permission...