How to set access rights on all groups for a limited administrator in SEPM