Setting to allow top-level group owners to create Service Accounts on Self-Managed

Background

In Service accounts can be created by top-level gr... (#451025 - closed) we fixed a bug that allowed group owners to create service accounts. This had unintended consequences for some customers, who were relying on group owners to create service accounts, and feel that restricting creation to admins is too restrictive.

Proposal

Create an admin-only setting that would allow top-level Group Owners to create service accounts. This would be disabled by default. This only shows up if it is a self-managed installation, and therefore able to be checked.

Issue Resolution Steps

Edited by Eren Akca