This commit restricts the permission to administer group merge request
approval settings to root group. Sub groups (i.e. groups which have
parent groups) will not be able to access this feature.

Recursive settings resolution of deeply nested group hierarchy is
computation-extensive. For the MVP, we would like to mitigate this risk
and re-evaluate this feature on nested group after collecting more user
feedback.