At the moment, we do not distinct between the normal users and the service users in that regards, so therefore there is no possiblity to only allow a user to manage normal users but not service users
At the moment we do not have something like that on the roadmap. If you would like to see this, its best to open up a feature request in our repository, and we can track how many would be interested in this