Organizational unit

Is there a way to have an admin manage only some users and not others?

Like having users under different organizational units, and then assigning an admin to that unit only?

I tried setting user permissions for the user doctype, but it seems to be locked for modifications, meaning I can’t add a custom field to filter permissions by it…