Group assignment to a user succeeds (even if I am not the manager of that group)


**Describe the bug**

manager can set role group to the user which is not belongs to him.

**Expected behavior**

not allow to set for other environment manager.

**Current behavior** 

succeeds in any case.

**Logs**
 
```
Paste any relevant application logs here.
```