Enhancement Request: Improve Subgroup Access Control

"(See ticket #200471.) Under Group Hierarchies settings