- Dedicated CRUD controller - Allow selected groups only - Old Mass action controller will be moved to own Mass validate users controller in separate pr - closes #4690