Clarify who can create users and groups

working-conventions.md

@@ -147,6 +147,10 @@ email addresses. There are a few policy decisions, however; these are in **bold*
 Our Google Workspace instance supports two different kinds of email address: a *user* address
 and a *group* address.
 
+1. A workspace Super Admin (among lesser, currently unused admin roles) can create users and
+   groups. Should we find it helpful, the Google Workspace interface allows us to designate
+   a new admin role that is not a Super Admin but can create and/or remove users and groups.
+
 1. User addresses:
 
     1. A user address comes with an entire Google account, with all the features one expects