Hi Ray, that isn't possible, because the object is indeed System.User. A non admin is only allowed to see his own System.User objects instead of other. Those entity access rules is defined in the System module which is read-only. This is fixed within Mendix which can't be changed.
The best to do is to have: