Many organisations such as ours (Banking) require segregation of duties between operations of a system and user administration.
Please consider an option to have a dedicated role type (User-Security) to manage user on/off-boarding.
Kind Regards,
Aron Campbell