More customizable admin roles

Allow more roles to be created for administration roles (creating/managing users, creating/managing workspaces, etc) without having to give full administrator role to the user account. Here's my use-case: I want to be able to create a "user admin" that can create/delete user accounts. I want to create a different role where I can grant access to any current and future workspace without having to go grant them specific access every time a new workspace is created.