We are trying to allow a user/group to create new users, but only as a member of certain groups. We have multiple "brand" super user groups. Each "brand" super user should only be allowed to add a new user to groups for their brand. With our current configuration, the group assignment works proper...