Minimum group assoc role 'moderator' should allow admins as well

See #402