CLOUDSTACK-3254: Allow admin to see and modify user affinity groups