Thank you for the quick reply. I just figured it out; thanks for making me have to look at my changes!
It is the moodle\user:update permission. Unfortunately, I am trying to keep the Browse List of Users option hidden, and this permission activates the list, so I won't be able to use this method (we're a company that has to keep our customers' groups separate for privacy reasons). But posting the answer for anyone else in search.