Adds specific rules for admins under the group and project policies
instead of manually checking `admin?` everytime we try to update
the setting.