[stable31] fix(settings): only provide groups the subadmin has access to

[stable31] fix(settings): only provide groups the subadmin has access to #16547