Grant org admin user to drop groups

[juanignaciosl]

During #104 we hit against a limitation: an org admin role can't drop groups, because dropping the role groups implies dropping all permissions granted to that role. When a user grants permissions on a table to a group he's the owner of that permission, and the admin can't drop it.

Right now only postgresql user can drop groups.

Relevant code.

cc @rochoa