Update notes for submitted changes

* Add rule for list_groups_for_user in policy.json