No, there is currently only a single admin permission for users in the r3 instance. Even if we separate user management from some system configuration, someone with user management permissions can just give themselves additional access.
If you want to separate user management from other admin tasks, you can use directories (like LDAP/ActiveDirectory) or OAuth to manage your users outside of r3. This is possible with the current feature set.
While it would technically be possible to split the current admin permission into multiple parts, it would have many consequences we´d need to address. As the benefits are not that large, I would personally not advocate for making this a priority at the moment.
