Fix puppet group modification access for sysadmins

Change-Id: I5bf432720541109b759f1ecc8731c2cfaf42ee60