Review scope/permissions for user management endpoints

[JenySadadia]

Review user management endpoints such as getting all existing user accounts and adding own user account to a group, for the security concerns pointed out by @pawiecz in #574.