Why 'edit users' privilege is required for users to be able to log in Bahmni?

Does this mean that any user who can log in the system can change user configuration? Would they be able to assign roles, for example, to themselves or other users?