I have users assigned to user groups based on team membership.  Teams have read access to many passwords.  When I give select team members Modify rights, they only get Read access.  What use are user groups if I can't elevate rights for individual members?

Is this by design?