User Management - how to create users without Admin Privileges?

It appears you need to be an Administrator in order to create and edit users.
For us, Administering the suitecrm platform requires different people from User Management.
We would like to have a user - think HR Manager - who could add users and edit their profile, but not be able to change the system-level aspects of the platform.
So, how is it possible to create a user who can administer users, but not the platform? That is, have different users with restricted administrative privileges.
We are surprised that this capability doesnt appear to be available out of the box.