Need control over group permissions so its clear to site creator who can do what

See SAK-6758 for the background as to the confusion that can arise about group permissions.

There isn't an easy way for site maintainers to see, in the site, what permissions are turned on w/r to groups for which roles. There is no way to adjust them differently, and it would be a problem because the group permissions are system wide instead of site specific like other tool permissions. Because the group templates provide the permission rules for all sties, and individual sites do not have individual settings for group permissions, changes would be needed in several places to provide site by site group permission control.