User can't add contacts

I've assigned some people as team leaders, but when they log in, they can't add contacts to the group they're managing.

Here's what I did:

1. Created a group for the team leaders (recruiters)
2. Created a group for the people being managed (recruits)
3. Add a contact (Donna) to the "recruiters" group.
4. Made sure "Donna" has civicrm access privileges, and an openid account.
5. Created a role "recruiter_role"
6. Created an ACL for that role with the following settings:
Role: recruiter_role
Operation: edit
Type of Data: group
Which Data: recruit
Description: Manage recruits
Enabled: Yes
7. Assigned the recruiter_role to the recruiter group
8. granted "access CiviCRM" to the recruiter_role

Here's the problem:
When Donna logs in, she can't add a contact

Workaround:
I granted more privileges to the role llike:
add contact
edit all contacts
view all contacts

Why the workaround won't work::
It grants too much to Donna. She can create administrator, and delete them.

What I expected to see:
Donna could log in and add contacts. All the contacts that she added would be recruits. She would not have access to anything else.