My company has a department that will need relatively frequent creation and deletion of users. Rather than exposing the entire administrator functionality set, I would like to just give the department access to create and delete users.
Is this possible, and if so will someone point me in the right direction?
You could change the permissions required around the public service API but the UI checks for admin rights to display the admin console. You may be able to do it via the javascript API once you have set the permission checks around the appropriate public service APIs (AuthenticationService and PersonService in public-services-security-context.xml).