You might also need to add /moodle/user:viewhiddendetails and /moodle/site:viewfullnames.
thank you very much for this help, it was exactly the part I was missing.
Best Regards, Marcus
Using Moodle 2.1 and have exactly the same need ( to be able to allow our IThelpdesk to support individual users without site permissions across the course areas and structures).
I have a roel created as a copy of the editing Teacher archetype, with most permissions stripped out, and the following changes made.
View ueser full information moodle/user:viewalldetails Allow
Edit user profile moodle/user:editprofile Allow
View user full information moodle/user:viewalldetails Allow
I have then created a link to Users > Accounts > browse list of users.
This link doesn't work unless I include the role as site admin, which I would prefer not to do.
Is edit users now restricted to site admins, or am I missing something here?
Many thanks for any input
OK - found my own answer, courtesy of John Isner:
This could do with being more prominent in the Moodle 2.0 documentation, perhaps,
I have give them the appropriate permissions in the "teacher" settings.
By overriding the Teacher role, you gave your teachers permissions that they have no way of using. That's because the Teacher role is assigned in the Course context, while the things you want to enable them to do (like create new accounts and edit profiles) are in the System context.
Create a NEW role with just the needed permissions and assign it to selected users using Site administration -> Users -> Permissions -> Assign System roles. Then reset the Teacher role using the Reset to defaults button.