Add admin_group_runners rule to GroupPolicy

app/policies/group_policy.rb

@@ -157,6 +157,7 @@ class GroupPolicy < Namespaces::GroupProjectNamespaceSharedPolicy
     enable :destroy_package
     enable :create_projects
     enable :admin_pipeline
+    enable :admin_group_runners
     enable :admin_build
     enable :read_cluster
     enable :add_cluster

app/views/projects/runners/_group_runners.html.haml

@@ -27,7 +27,7 @@
 - elsif @group_runners.empty?
   = _('This group does not have any group runners yet.')
 
-  - if can?(current_user, :admin_pipeline, @project.group)
+  - if can?(current_user, :admin_group_runners, @project.group)
     - group_link = link_to _("group's CI/CD settings."), group_settings_ci_cd_path(@project.group)
     = _('Group maintainers can register group runners in the %{link}').html_safe % { link: group_link }
   - else

ee/app/policies/ee/group_policy.rb

@@ -378,6 +378,7 @@ module EE
         prevent :admin_issue_board_list
         prevent :admin_issue
         prevent :admin_pipeline
+        prevent :admin_group_runners
         prevent :add_cluster
         prevent :create_cluster
         prevent :update_cluster

spec/support/shared_contexts/policies/group_policy_shared_context.rb

@@ -48,6 +48,7 @@ RSpec.shared_context 'GroupPolicy context' do
       destroy_package
       create_projects
       read_cluster create_cluster update_cluster admin_cluster add_cluster
+      admin_group_runners
     ]
   end