Restrictions HELP?

[Chunkminecraft]

Ok I have made a new group called head admin which can do everything that an admin can do + it can change the player's group/rank. What I want to know is if you can prevent head admins from making themselves superadmins/making anyone else a superadmin. But head admins still need to be able to make people admin and demote them to user if the admin abuses/is rubbish. (I want to be the only superadmin on my server so people cannot mess up ranks etc)

Thanks for taking your time to read, and if you can help then that would be amazing!

[roastchicken]

I'm not 100% sure how access tags work, but I think you can have something like '!superadmin' to the access tags for the headadmin's adduser command. In command form it would be 'groupallow headadmin adduser !superadmin'. I'll test this in a bit to see if it works.

[Aharon Tager]

If you go through XGUI there's an option to whitelist string values. put in, one by one, the groups you want them to be able to change people to.