Postgresql createrole permission for user
According to the docs, you have to use SET ROLE before actually using the createrole privilege.

Connect as user1 and issue

SET ROLE group1;
CREATE ROLE newuser;


Also, beware - CREATEROLE is in fact equivalent of superuser. This is also said in the docs.