Users with the ucpAdminRole can create, edit, delete user groups, and also assign roles to a user group.