System Setting to Only Allow Permissions to be applied via Security Groups, not individual users

[support]

Request from Customer:

 

Our wish is that rights to shared passwordlists are only granted to AD security groups. Of course personal lists not, they are always personal.
 

There may only be one excpection. Only security administrators may grant rights to users.

 

Reason: when employees changes to other departments, we are not sure that the old rights are drawn back after changing the AD groups because there cloud be individual rights. We prefer only access via AD groups and now we can’t be sure of that.