Currently adding a permission (Administrator/System Administrator) to a group for the Crowd Console application implies adding that group as 'Allowed to authenticate'.

Also to add a group as 'Allowed to authenticate' one needs to add either an Administrator or System Administrator.

In some cases it would be useful to be able to allow users in a specific group to authenticate to Crowd, but have no Administrator permissions. It'd also be useful to grant Admin/Sysadmin permissions to a group, without having to allow that group to log in explicitly (for example for nested groups).