Users should be able to change all of their info. Email, password, affiliation, and most importantly UCSC URL. Basically show the User page and let them edit. They shouldn't be able to change what groups they belong to.
Likewise, Managers of a group should be able to change their group(s) info too and be able to add and subtrack users.