Removes compliance framework administration abilities from subgroups

See merge request gitlab-org/gitlab!58873