allow some non-superusers to have 'personnel admin privileges' to edit all fields of all Users and UserProfiles