Please change each the "Manage (create / edit / delete) groups" from a single setting to three separate settings.
Manage (create / edit / delete) groups
One reason for this request:
This would allow you to set TAs (or other roles) to having only the permissions needed for that role instead of none of them or all of them. For example, the ability to edit groups but not add and delete groups.