USER ADMIN authority lets you manage external logins, login policies, and other users.
GRANT USER ADMIN TO userid