Sounds like you should write a custom registration portlet and either store the "registration request" to be completed by an Administrator (e.g. someone with proper permissions) or create the user according to the user's choices, use workflow to approve those users.

There's no way to achieve this without custom code as typically users can't choose their personal permissions themselves.