Issue Summary

When someone has two (or more) Cloud Sites on a Centralized Experience, the groups are managed under Directory. All groups for both sites can be found and managed on the same page.

User Access Admins are able to manage the groups, with some restrictions. One restriction is, that if a group contains a product that is not managed by the UAA, the admin can't delete the group or remove the product. However, the UAA can still add his own product to the group.

It would be great if a group can be restricted to one site only, and can't be changed by UAAs of other sites.