If a user is a team administrator within a team or has edit project level permission, they can manage permissions.   How can allow a user to be able to enable iterations, customize a kanban board, etc but not be allowed to add or remove user to teams or to the team project?