I love the ability to have multiple levels of "manage users". I also love the ability to "Login as" a Community user without requiring their permission. The limitation I've come across is that there are users within my organization who need to "login as" a community user in order to provide that person with support, or to get a feel for what that person is seeing. They are not administrators and I am very nervous about giving them the "manage users" permission. However, that permission is required
in order for them to login as Community users. Please allow this as a permission subset.