I have a group of user called deptadmins.

We want them to perform certain actions in a container. We have decided
against Console 1.
I am trying to give them rights, to change users names, telephone
numbers and group memberships, simple things this went OK.
My problem is that I do not want them to be able to create new users,
but I do want them to be able to create groups. Is this possible ? I
have been trying with trustee of the object, and assigned rughts, am I
in the correct place ?

Thanks in advance Greg