At the moment this is only available to the MSP admin, but allowing the tenant admin access to configure custom roles and permissions beyond the basic Chat Only, General and workshop users.

On our Tenant I have setup some custom roles that nearly are identical to the normal permissions with the exception of the group administrator, a specifically designed role that I can give to a Department head or manager that they can administer the groups etc. but not be able to adjust any of the tenant settings.