ZEN-11237: Owners of Administered Objects cannot create sub-groups