Minimal Access is a special role allowed at top-level groups.
This change allows that role to be set for a SAML Group Link created
at the top-level.

Changelog: added
EE: true