When logging in as tenant admin (role "EVM Tenant admin" in tenant test1) It is posible to create groups for te root tenant and for other tenants (test2). (The API handles this correctly, rejecting these actions) https://github.com/ManageIQ/manageiq-ui-classic/issues/134
Solution for master: https://github.com/ManageIQ/manageiq-ui-classic/pull/151 https://github.com/ManageIQ/manageiq-ui-classic/pull/203