Prevent users for assigning permissions I want to control what users are able to do. For example, prevent access to the CP when the system is off.

How can I prevent users for assigning extra permissions but still allow them to assign users to User Groups?

At present, it would appear that anyone able to assign User Groups is also able to assign whatever permissions they want.
I’ve built a plugin to allow control over what user groups can allocate permissions.

https://github.com/joshuabaker/Sanction