You may want to delegate managing users in the account, without extending administrator role, and you can do so by giving the user a role / security group with the 'Can Manage Users' permission. Users with this permission will be able to add and suspend users, but not set others to an administrator role.