We are trying to delegate the management of access to our Phabricator install, so I create an "access" project and set the #people application so that members of this project can create new (non-bot) accounts. I then realized, however, that this permission does not allow re-enabling disable accounts. We had an intern who left for a while and then came back, and members of the "access" project could not re-enable this access.