Currently, Many users can have the maximum level of power, but not change each others settings unless so granted the permission, etc.
The beginings of a console level account and password protection have been added, soon to be fused with a new permission check module, that allows any user logged in as console, to override ALL permissions. (Add to group without being in that group, etc.)