Add a security role to block staff users from viewing Users & Groups.

…or remove this ability from the default staff security permissions and add another security role to enable it.