Have implemented possibility to mark users, groups, and roles as system. This means that only people with the ADMINISTRATION permission can edit or delete these.