https://spaces.at.internet2.edu/display/Grouper/Do+not+allow+non+sysadmins+to+add+EveryEntity+to+groups+or+privileges