Hello Bahrom,
In general, the “Sales Director” role does not usually imply permission to create new users, manage access rights, or assign access group profiles. This is normally an administrative function and is usually performed by a system administrator.
So, by default, a user created as “Sales Director” will most likely not be able to create other users or assign them access rights.
If this is required by your business process, then I would suggest creating a separate access group or access group profile for this purpose. In this profile, you need to include the required administrative rights related to user management, access groups, and access group profiles. Then you can add the “Sales Director” user to this access group.
Also, please keep in mind that if you give the Sales Director permission to create new users, he may be able to create any users, not only members of his own department.
In other words, by default, the right to create users usually means the right to create any user.
This can probably be changed by modifying the application code, but honestly, I do not think this is a best practice. In real-life systems, administrative permissions are usually concentrated in the hands of the system administrator.