Allow restricting by group

Users should be able to restrict this change to a single group/org. That way they don't accidentally change stuff they're not thinking about.