Honestly I don't understand why this isn't already a feature. One of our biggest pain points with ZD is that permissions across the platform aren't segmented or granular for the most part.

We want managers and specific staff to be able to add organisations in as we get many different new organisations sending emails in, and we need them tracked and in ZD.

However, we don't want staff with this access to be able to edit internal groups, as this allows for them to remove or add people to groups they shouldn't be in, or to delete whole groups. We've had a similar issue in the past with adding in 'Call Listening' access to certain users w/ ZD Talk, which needed users to essentially have Admin level access to certain features as there was no segmentation of the feature. I believe this has been fixed now, but seeing this kind of segmentation across the whole suite honestly should be a requirement.

Groups and organisations in ZD are separate things, but why is the option to edit them not only combined, but also has the 'add, edit and delete end users' permission as a requirement?

As Travis and Steve have said above, it hurts our workflow as I need to be doing tasks that should be assigned to staff members who manage the client-facing side of things, but shouldn't have access to managing user groups.