Edit users without allowing access control

I wish to create a role which will allow user administration, ie add and edit users, assign roles and reset passwords.

If in the access control page I give this role "administer users" permissions, they are also given rights to the access control settings. This means that rather than just assigning roles, the user admin can reset roles and permissions. This could be seen as a Bad Thing.

Is there a way of allowing the user admin to edit user settings without being given rights to the access control page?

Thanks
Rich