Hi Peter,
Actually I told you wrong, it is really listed as "Roles that Can Create Users". I'm not sure what version we added that in site settings, but prior to that I'm pretty sure it was a Web.config setting for quite a while and at some point we promoted it to site settings to make it site specific.
Hope it helps,
Joe