Create a "UMC-only"-Admin which can just create/modify users but cannot do anything to admin-accounts

[letmesetupthis]

here’s the solution for the template-related error:

Please add a UDM-Policy which allows me to use templates

As you can see in this thread I’m searching for a way to enable a “superuser” to create users but not messing up anything else: it looks like everything works but using templates when creating users… so adding every policy (but udm-all) to my custom Group won’t fix it… but as soon as I add udm-all templates work… so there seems to be the need of a new policy for this… cna someone give me a hint how I could create this (new policy like “udm-templates” myself?