I already added users.read.basic and users.read.restricted, and added them both as sub-permissions to users.
The additional permissions I need related to the handling of permission-sets, which will be done by the "permissions" back-end module. So they could be called
has defined a number of new permissions he would like in the black box for UI work.