Restrict admin functions to specific groups
Currently, only admins may take snapshots, change settings, etc. This restriction should be extended to arbitrary groups, i.e., in the app settings, any groups can be allowed access to these restricted functions.