[stable30] fix(settings): only provide groups the subadmin has access to

[stable30] fix(settings): only provide groups the subadmin has access to #22087