Ad security group manager can update membership list