user | usergroup#member | usergroup#manager

says that you can grant the members or just the managers, access to that role