Prevent groups from being set as the value of a "single-member" role group

Being able to set a multi-member group would defeat the purpose of
limiting a role to only having one member.
Provide a better success message when setting ("adding a member") a single-value role group
Merge branch '4.2/role-group-restrictions'