New role topGroupCreator

 - this role give only one privilage to user (create new topLevelGroup)
 - add methods isVoObserver, isTopGroupCreator