You can specify some groups with special handling. You can fix the shell for group users. Each special group defines a special admin privilege that you can assign to normal users. With this privilege, they can add, delete and modify users in that group.