#23 - Global admins should not be added as group members
Application admins can always manage organisational units