User accounts in pi are built in a hierarchy.
Administrators only have access to and can only create or edit users that belong below them in the user tree.
This allows you to create local administrators, i.e. those that can only change or add users within their own tenancy.