exact... remember that Admins are also members, they have to have the usergroup permission... i did not make them by default because a lot of site admins require authentication of their own admins to receive these rights and they prefer making the change themselves.
