Privilege for managing acces

[bran.ko]

Is it possible to create privilege for sub admin to manage users their OTP.
But restricted to create higher admin, or assign group admins to new user.

And another privilege to System>Acces>Tester is it possible to create this one ?

Thanks

[bran.ko]

answer for my second question is (I searched for page-system-...)

page-diagnostics-authentication