allow admin user to create usergroups for anything