Card #104 - hid GLOBAL_ADMIN as role option (is added automatically on new), removed restriction of must have at least one group added