Users are stored in the tree like other content objects / nodes. Therefore, you could grant the same content read / create / edit / remove / move permissions as you would on other content, but limited to the User class and/or the Users section or subtree.