adding getAdministrators helper to the gateway
fixing prohibited action of user/group removal