Group manage self service

Hi all,

I'm struggling with setting up self service for users to manage groups. What I have done is on OU (where are my groups) add permission to "authenticated users" template "self - Group manage". On other OU where are users - template "users - list". Everything seems to be working fine until one user (regular one, no admin) could change members of group were he/she was NOT manager/secondary owner.

Can someone confirm permissions/templates that need to be deployed on OU's, so the user can manage their own groups not other ones.