At the moment a user needs the functional privilege of "User admin" to add system integration or ARIS integration. This right allows also the administration of users.
I suggest to separate that into two functional privileges. This gives better control for whos is allowed to do what. System integration managers/admin should not (does not need) be able to manage users.