In the User Manager an administrator can change the usergroups that a user is a member of. The administrator can only make the user a member of the usergroups that the administrator controls (ie so that the administrator cannot promote a lesser user to leapfrog above the administrator).