Customer-admin user management

Customer-admins should be able to add and remove users within their own customer account, without operator involvement. Parked while we figure out the multi-customer role question.