updated ac_logic_tier to recognize admin permissions

ac logic tier now allows creation of usergroups by a user if that user
has admin permissions on all the resources that the usergroup is
granting access to