“User” is the most limited role.
“User Admin” can add users, remove users, edit user profile information and edit their office information.
“Group Admin” has the same permissions as “User Admin” with the additional ability of editing other office information in the “Group”. They can edit user profile from other offices as long as they are part of the same “Group”.