If you want to make another user site-wide admin then grant him admin permission on the special object 0 at: /permissions/one?object_id=0.
To allow the user to administer groups it should be sufficient to grant admin on the Main Site object, but to change passwords and other user admin stuff which is part of the site-wide adminstration he has to be site-wide admin.