Issue NuCivic/nucivic-internal#45:

+ restricting group organizer role
+ new 'access user settings' permission to restrict access to /admin/config/people
+ new 'access global og settings' permission to restrict access to
/admin/config/group