Users confirming new/changes to existing Users or Authorisation groups should have full rights on Confirm and read right on Registration.