Local user manager and privilege
I have many local users on my pfsense to just access the captive portal and I need to create one user with privilege access to the user manager only to create local users only.
But When i created this user I found that he can grant move himslef to admins group and reset the admin user password.
How I can create an user with user manager privilege and deny him to change admin password and move him self to other groups
So that instead he'd create a new admin and use that? You cannot, the privileges are per page, nothing more.
Move captive portal authentication to a RADIUS server and grant your privileged user access to create accounts in RADIUS.