LPS-35738 Add permission to manage subsites (and make group permission consistent)